Approved changes feed: RSS · Atom

cpe:2.3:a:mozilla:thunderbird:131.0:*:*:*:*:*:*:*

part: a version: 131.0 update: *

VendorMozilla (be1b0d4e-21a7-5a25-9982-bbda6ef43ec1)
ProductThunderbird (e5553559-8c71-58cd-a1a6-c5f5cf77e32f)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:deb/debian/thunderbird purl2cpe 2026-06-01 10:17:53.769325
pkg:mozilla/comm-central purl2cpe 2026-06-01 10:17:53.769327
pkg:rpm/fedora/thunderbird purl2cpe 2026-06-01 10:17:53.769328
pkg:rpm/opensuse/mozillathunderbird purl2cpe 2026-06-01 10:17:53.769330

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2024-9680 vulnerable 2026-06-03 14:58:22.434563 Details available
An attacker was able to achieve code execution in the content process by exploiting a use-after-free in Animation timelines. We have had reports of this vulnerability being exploited in the wild. This vulnerability affects Firefox < 131.0.2, Firefox ESR < 128.3.1, Firefox ESR < 115.16.1, Thunderbird < 131.0.1, Thunderbird < 128.3.1, and Thunderbird < 115.16.0.
Published: 2024-10-09T12:59:07.108Z
Updated: 2025-11-03T22:33:32.973Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.