Known vulnerabilities in thunderbird (Red Hat package) - page 15

Software CPE: cpe:2.3:o:red_hat:thunderbird_redhat_package:*:*:*:*:*:red_hat_enterprise_linux:*:*
Total vulnerabilities: 766
Public exploits: 17
Known exploited (KEV): 7
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting thunderbird (Red Hat package) thunderbird (Red Hat package) is affected by 766 known vulnerabilities: 7 critical, 358 high, 252 medium, 149 low Critical High Medium Low

Vulnerabilities (766)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU113141 - Improper Control of Generation of Code ('Code Injection')
CVE-2025-8029
CWE-94 Medium
No
No
128.13.0-3.el8_2, 128.13.0-3.el8_4, 128.13.0-3.el8_6, 128.13.0-3.el8_8, 128.13.0-3.el8_10, 128.13.0-3.el9_0, 128.13.0-3.el9_2, 128.13.0-3.el9_4, 128.13.0-3.el9_6, 128.13.0-3.el10_0 22.07.2025 SB2025072253
SB2025072321
SB2025072322
and 38 more
#VU111889 - Protection Mechanism Failure
CVE-2025-6430
CWE-693 Medium
No
No
128.12.0-1.el8_10 24.06.2025 SB2025062449
SB2025062452
SB2025062453
and 30 more
#VU111888 - Improper input validation
CVE-2025-6429
CWE-20 Low
No
No
128.12.0-1.el8_10 24.06.2025 SB2025062449
SB2025062452
SB2025062453
and 30 more
#VU111886 - Exposure of sensitive information to an unauthorized actor
CVE-2025-6425
CWE-200 Medium
No
No
128.12.0-1.el8_10 24.06.2025 SB2025062449
SB2025062452
SB2025062453
and 30 more
#VU111885 - Use After Free
CVE-2025-6424
CWE-416 High
No
No
128.12.0-1.el8_10 24.06.2025 SB2025062449
SB2025062452
SB2025062453
and 30 more
#VU111055 - Improper input validation
CVE-2025-5986
CWE-20 Medium
No
No
128.12.0-1.el8_2, 128.12.0-1.el8_4, 128.12.0-1.el8_6, 128.12.0-1.el8_8, 128.12.0-1.el8_10, 128.12.0-1.el9_0, 128.12.0-1.el9_2, 128.12.0-1.el9_4, 128.12.0-1.el9_6, 128.12.0-1.el10_0 11.06.2025 SB2025061120
SB2025061237
SB2025061238
and 14 more
#VU109878 - Memory corruption
CVE-2025-5269
CWE-119 High
No
No
128.11.0-1.el8_8, 128.11.0-1.el8_10, 128.11.0-1.el9_0, 128.11.0-1.el9_2, 128.11.0-1.el9_4, 128.11.0-1.el10_0 27.05.2025 SB2025052751
SB2025052772
SB2025052843
and 22 more
#VU109877 - Memory corruption
CVE-2025-5268
CWE-119 High
No
No
128.11.0-1.el8_8, 128.11.0-1.el8_10, 128.11.0-1.el9_0, 128.11.0-1.el9_2, 128.11.0-1.el9_4, 128.11.0-1.el10_0 27.05.2025 SB2025052751
SB2025052771
SB2025052772
and 23 more
#VU109876 - Insufficient UI Warning of Dangerous Operations
CVE-2025-5267
CWE-357 Low
No
No
128.11.0-1.el8_8, 128.11.0-1.el8_10, 128.11.0-1.el9_0, 128.11.0-1.el9_2, 128.11.0-1.el9_4, 128.11.0-1.el10_0 27.05.2025 SB2025052751
SB2025052771
SB2025052772
and 23 more
#VU109875 - Exposure of sensitive information to an unauthorized actor
CVE-2025-5266
CWE-200 Medium
No
No
128.11.0-1.el8_8, 128.11.0-1.el8_10, 128.11.0-1.el9_0, 128.11.0-1.el9_2, 128.11.0-1.el9_4, 128.11.0-1.el10_0 27.05.2025 SB2025052751
SB2025052771
SB2025052772
and 23 more
#VU109858 - Improper input validation
CVE-2025-5264
CWE-20 Medium
No
No
128.11.0-1.el8_8, 128.11.0-1.el8_10, 128.11.0-1.el9_0, 128.11.0-1.el9_2, 128.11.0-1.el9_4, 128.11.0-1.el10_0 27.05.2025 SB2025052751
SB2025052771
SB2025052772
and 23 more
#VU109857 - Error Handling
CVE-2025-5263
CWE-388 Medium
No
No
128.11.0-1.el8_8, 128.11.0-1.el8_10, 128.11.0-1.el9_0, 128.11.0-1.el9_2, 128.11.0-1.el9_4, 128.11.0-1.el10_0 27.05.2025 SB2025052751
SB2025052771
SB2025052772
and 23 more
#VU109401 - Out-of-bounds write
CVE-2025-4921
CWE-787 High
No
No
128.11.0-1.el8_8, 128.11.0-1.el8_10, 128.11.0-1.el9_0, 128.11.0-1.el9_2, 128.11.0-1.el9_4, 128.11.0-1.el10_0 18.05.2025 SB2025051812
SB2025051813
SB2025051908
and 32 more
#VU109400 - Out-of-bounds write
CVE-2025-4920
CWE-787 High
No
No
128.11.0-1.el8_8, 128.11.0-1.el8_10, 128.11.0-1.el9_0, 128.11.0-1.el9_2, 128.11.0-1.el9_4, 128.11.0-1.el10_0 18.05.2025 SB2025051812
SB2025051813
SB2025051908
and 32 more
#VU109193 - Exposure of sensitive information to an unauthorized actor
CVE-2025-3932
CWE-200 Low
No
No
128.10.1-1.el8_2, 128.10.1-1.el8_4, 128.10.1-1.el8_6, 128.10.1-1.el8_8, 128.10.1-1.el9_2, 128.10.1-1.el10_0, 128.11.0-1.el8_10 14.05.2025 SB2025051464
SB2025051675
SB2025051707
and 12 more
#VU109192 - Improper input validation
CVE-2025-3909
CWE-20 High
No
No
128.10.1-1.el8_2, 128.10.1-1.el8_4, 128.10.1-1.el8_6, 128.10.1-1.el8_8, 128.10.1-1.el9_2, 128.10.1-1.el10_0, 128.11.0-1.el8_10 14.05.2025 SB2025051464
SB2025051675
SB2025051707
and 12 more
#VU109191 - Improper input validation
CVE-2025-3877
CWE-20 Medium
No
No
128.10.1-1.el8_2, 128.10.1-1.el8_4, 128.10.1-1.el8_6, 128.10.1-1.el8_8, 128.10.1-1.el9_2, 128.10.1-1.el10_0, 128.11.0-1.el8_10 14.05.2025 SB2025051464
SB2025051675
SB2025051707
and 10 more
#VU109190 - Improper input validation
CVE-2025-3875
CWE-20 Medium
No
No
128.10.1-1.el8_2, 128.10.1-1.el8_4, 128.10.1-1.el8_6, 128.10.1-1.el8_8, 128.10.1-1.el9_2, 128.10.1-1.el10_0, 128.11.0-1.el8_10 14.05.2025 SB2025051464
SB2025051675
SB2025051707
and 12 more
#VU108048 - Out-of-bounds read
CVE-2025-4087
CWE-125 High
No
No
128.10.0-1.el8_10, 128.10.0-1.el9_5 29.04.2025 SB2025042927
SB2025042928
SB2025042929
and 27 more
#VU108044 - Improper Locking
CVE-2025-2817
CWE-667 Low
No
No
128.10.0-1.el8_10, 128.10.0-1.el9_5 29.04.2025 SB2025042927
SB2025042928
SB2025042929
and 26 more


Showing elements 281 - 300 out of 766