Known vulnerabilities in thunderbird (Red Hat package) - page 14

Software CPE: cpe:2.3:o:red_hat:thunderbird_redhat_package:*:*:*:*:*:red_hat_enterprise_linux:*:*
Total vulnerabilities: 737
Public exploits: 16
Known exploited (KEV): 7
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting thunderbird (Red Hat package) thunderbird (Red Hat package) is affected by 737 known vulnerabilities: 7 critical, 346 high, 238 medium, 146 low Critical High Medium Low

Vulnerabilities (737)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU109878 - Memory corruption
CVE-2025-5269
CWE-119 High
No
No
128.11.0-1.el8_8, 128.11.0-1.el8_10, 128.11.0-1.el9_0, 128.11.0-1.el9_2, 128.11.0-1.el9_4, 128.11.0-1.el10_0 27.05.2025 SB2025052751
SB2025052772
SB2025052843
and 22 more
#VU109877 - Memory corruption
CVE-2025-5268
CWE-119 High
No
No
128.11.0-1.el8_8, 128.11.0-1.el8_10, 128.11.0-1.el9_0, 128.11.0-1.el9_2, 128.11.0-1.el9_4, 128.11.0-1.el10_0 27.05.2025 SB2025052751
SB2025052771
SB2025052772
and 23 more
#VU109875 - Exposure of sensitive information to an unauthorized actor
CVE-2025-5266
CWE-200 Medium
No
No
128.11.0-1.el8_8, 128.11.0-1.el8_10, 128.11.0-1.el9_0, 128.11.0-1.el9_2, 128.11.0-1.el9_4, 128.11.0-1.el10_0 27.05.2025 SB2025052751
SB2025052771
SB2025052772
and 23 more
#VU109858 - Improper input validation
CVE-2025-5264
CWE-20 Medium
No
No
128.11.0-1.el8_8, 128.11.0-1.el8_10, 128.11.0-1.el9_0, 128.11.0-1.el9_2, 128.11.0-1.el9_4, 128.11.0-1.el10_0 27.05.2025 SB2025052751
SB2025052771
SB2025052772
and 23 more
#VU109857 - Error Handling
CVE-2025-5263
CWE-388 Medium
No
No
128.11.0-1.el8_8, 128.11.0-1.el8_10, 128.11.0-1.el9_0, 128.11.0-1.el9_2, 128.11.0-1.el9_4, 128.11.0-1.el10_0 27.05.2025 SB2025052751
SB2025052771
SB2025052772
and 23 more
#VU109193 - Exposure of sensitive information to an unauthorized actor
CVE-2025-3932
CWE-200 Low
No
No
128.10.1-1.el8_2, 128.10.1-1.el8_4, 128.10.1-1.el8_6, 128.10.1-1.el8_8, 128.10.1-1.el9_2, 128.10.1-1.el10_0, 128.11.0-1.el8_10 14.05.2025 SB2025051464
SB2025051675
SB2025051707
and 12 more
#VU109192 - Improper input validation
CVE-2025-3909
CWE-20 High
No
No
128.10.1-1.el8_2, 128.10.1-1.el8_4, 128.10.1-1.el8_6, 128.10.1-1.el8_8, 128.10.1-1.el9_2, 128.10.1-1.el10_0, 128.11.0-1.el8_10 14.05.2025 SB2025051464
SB2025051675
SB2025051707
and 12 more
#VU109191 - Improper input validation
CVE-2025-3877
CWE-20 Medium
No
No
128.10.1-1.el8_2, 128.10.1-1.el8_4, 128.10.1-1.el8_6, 128.10.1-1.el8_8, 128.10.1-1.el9_2, 128.10.1-1.el10_0, 128.11.0-1.el8_10 14.05.2025 SB2025051464
SB2025051675
SB2025051707
and 10 more
#VU109190 - Improper input validation
CVE-2025-3875
CWE-20 Medium
No
No
128.10.1-1.el8_2, 128.10.1-1.el8_4, 128.10.1-1.el8_6, 128.10.1-1.el8_8, 128.10.1-1.el9_2, 128.10.1-1.el10_0, 128.11.0-1.el8_10 14.05.2025 SB2025051464
SB2025051675
SB2025051707
and 12 more
#VU108050 - Memory corruption
CVE-2025-4093
CWE-119 High
No
No
128.10.0-1.el8_10, 128.10.0-1.el9_5 29.04.2025 SB2025042927
SB2025042929
SB2025043001
and 26 more
#VU108049 - Memory corruption
CVE-2025-4091
CWE-119 High
No
No
128.10.0-1.el8_10, 128.10.0-1.el9_5 29.04.2025 SB2025042927
SB2025042928
SB2025042929
and 27 more
#VU108048 - Out-of-bounds read
CVE-2025-4087
CWE-125 High
No
No
128.10.0-1.el8_10, 128.10.0-1.el9_5 29.04.2025 SB2025042927
SB2025042928
SB2025042929
and 27 more
#VU108046 - Protection Mechanism Failure
CVE-2025-4083
CWE-693 High
No
No
128.10.0-1.el8_10, 128.10.0-1.el9_5 29.04.2025 SB2025042927
SB2025042928
SB2025042929
and 27 more
#VU108044 - Improper Locking
CVE-2025-2817
CWE-667 Low
No
No
128.10.0-1.el8_10, 128.10.0-1.el9_5 29.04.2025 SB2025042927
SB2025042928
SB2025042929
and 26 more
#VU107465 - User Interface (UI) Misrepresentation of Critical Information (Clickjacking, spoofing)
CVE-2025-3523
CWE-451 Low
No
No
128.9.2-1.el8_2, 128.9.2-1.el8_4, 128.9.2-1.el8_6, 128.9.2-1.el8_8, 128.9.2-1.el8_10, 128.9.2-1.el9_0, 128.9.2-1.el9_2, 128.9.2-1.el9_4, 128.9.2-1.el9_5 15.04.2025 SB2025041536
SB2025041555
SB2025042487
and 13 more
#VU107464 - Exposure of sensitive information to an unauthorized actor
CVE-2025-2830
CWE-200 Low
No
No
128.9.2-1.el8_2, 128.9.2-1.el8_4, 128.9.2-1.el8_6, 128.9.2-1.el8_8, 128.9.2-1.el8_10, 128.9.2-1.el9_0, 128.9.2-1.el9_2, 128.9.2-1.el9_4, 128.9.2-1.el9_5 15.04.2025 SB2025041536
SB2025041555
SB2025042487
and 13 more
#VU107463 - Exposure of sensitive information to an unauthorized actor
CVE-2025-3522
CWE-200 Medium
No
No
128.9.2-1.el8_2, 128.9.2-1.el8_4, 128.9.2-1.el8_6, 128.9.2-1.el8_8, 128.9.2-1.el8_10, 128.9.2-1.el9_0, 128.9.2-1.el9_2, 128.9.2-1.el9_4, 128.9.2-1.el9_5 15.04.2025 SB2025041536
SB2025041555
SB2025042487
and 13 more
#VU106360 - Memory corruption
CVE-2025-3030
CWE-119 High
No
No
128.9.0-2.el8_2, 128.9.0-2.el8_4, 128.9.0-2.el8_6, 128.9.0-2.el8_8, 128.9.0-2.el8_10, 128.9.0-2.el9_2, 128.9.0-2.el9_4, 128.9.0-2.el9_5 01.04.2025 SB2025040129
SB2025040130
SB2025040131
and 40 more
#VU106359 - User Interface (UI) Misrepresentation of Critical Information (Clickjacking, spoofing)
CVE-2025-3029
CWE-451 Medium
No
No
128.9.0-2.el8_2, 128.9.0-2.el8_4, 128.9.0-2.el8_6, 128.9.0-2.el8_8, 128.9.0-2.el8_10, 128.9.0-2.el9_2, 128.9.0-2.el9_4, 128.9.0-2.el9_5 01.04.2025 SB2025040129
SB2025040130
SB2025040131
and 40 more
#VU106358 - Use After Free
CVE-2025-3028
CWE-416 High
No
No
128.9.0-2.el8_2, 128.9.0-2.el8_4, 128.9.0-2.el8_6, 128.9.0-2.el8_8, 128.9.0-2.el8_10, 128.9.0-2.el9_2, 128.9.0-2.el9_4, 128.9.0-2.el9_5 01.04.2025 SB2025040129
SB2025040130
SB2025040131
and 40 more


Showing elements 261 - 280 out of 737