Approved changes feed: RSS · Atom

cpe:2.3:a:mozilla:thunderbird:-:*:*:*:*:*:*:*

part: a version: - update: *

VendorMozilla (be1b0d4e-21a7-5a25-9982-bbda6ef43ec1)
ProductThunderbird (e5553559-8c71-58cd-a1a6-c5f5cf77e32f)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:deb/debian/thunderbird purl2cpe 2026-06-01 10:17:53.729761
pkg:mozilla/comm-central purl2cpe 2026-06-01 10:17:53.729763
pkg:rpm/fedora/thunderbird purl2cpe 2026-06-01 10:17:53.729764
pkg:rpm/opensuse/mozillathunderbird purl2cpe 2026-06-01 10:17:53.729765

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2024-9403 vulnerable 2026-06-08 07:00:27.259913 Details available
Memory safety bugs present in Firefox 130. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Firefox < 131 and Thunderbird < 131.
Published: 2024-10-01T15:13:22.837Z
Updated: 2025-03-19T18:05:46.429Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-7527 vulnerable 2026-06-08 06:58:22.377638 Details available
Unexpected marking work at the start of sweeping could have led to a use-after-free. This vulnerability affects Firefox < 129, Firefox ESR < 115.14, Firefox ESR < 128.1, Thunderbird < 128.1, and Thunderbird < 115.14.
Published: 2024-08-06T12:38:14.698Z
Updated: 2025-03-18T19:05:01.797Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-7520 vulnerable 2026-06-08 06:58:22.367296 Details available
A type confusion bug in WebAssembly could be leveraged by an attacker to potentially achieve code execution. This vulnerability affects Firefox < 129, Firefox ESR < 128.1, and Thunderbird < 128.1.
Published: 2024-08-06T12:38:13.117Z
Updated: 2025-03-24T16:39:36.894Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-5700 vulnerable 2026-06-08 06:56:17.079483 Details available
Memory safety bugs present in Firefox 126, Firefox ESR 115.11, and Thunderbird 115.11. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Firefox < 127, Firefox ESR < 115.12, and Thunderbird < 115.12.
Published: 2024-06-11T12:40:14.287Z
Updated: 2024-08-01T21:18:07.031Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-5688 vulnerable 2026-06-08 06:56:17.065284 Details available
If a garbage collection was triggered at the right time, a use-after-free could have occurred during object transplant. This vulnerability affects Firefox < 127, Firefox ESR < 115.12, and Thunderbird < 115.12.
Published: 2024-06-11T12:40:12.457Z
Updated: 2024-08-01T21:18:07.039Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-4777 vulnerable 2026-06-08 06:50:18.620171 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-4770 vulnerable 2026-06-08 06:50:18.606703 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-4769 vulnerable 2026-06-08 06:50:18.605518 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-4367 vulnerable 2026-06-08 06:50:17.592041 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-3854 vulnerable 2026-06-08 06:43:51.678684 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-3852 vulnerable 2026-06-08 06:43:51.673192 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-2608 vulnerable 2026-06-08 06:33:31.639449 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-1546 vulnerable 2026-06-08 06:27:13.355957 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-11708 vulnerable 2026-06-08 06:23:50.263969 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-11705 vulnerable 2026-06-08 06:23:50.259641 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-11704 vulnerable 2026-06-08 06:23:50.258757 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-11702 vulnerable 2026-06-08 06:23:50.241698 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-11701 vulnerable 2026-06-08 06:23:50.241103 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-11700 vulnerable 2026-06-08 06:23:50.240442 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-11699 vulnerable 2026-06-08 06:23:50.239809 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-11698 vulnerable 2026-06-08 06:23:50.238987 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-11697 vulnerable 2026-06-08 06:23:50.238130 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-11696 vulnerable 2026-06-08 06:23:50.237054 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-11693 vulnerable 2026-06-08 06:23:50.234637 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-11692 vulnerable 2026-06-08 06:23:50.233829 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-11691 vulnerable 2026-06-08 06:23:50.218944 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-10468 vulnerable 2026-06-08 06:23:46.663353 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-10467 vulnerable 2026-06-08 06:23:46.662677 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-10466 vulnerable 2026-06-08 06:23:46.661476 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-10465 vulnerable 2026-06-08 06:23:46.660548 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-10464 vulnerable 2026-06-08 06:23:46.659682 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-10463 vulnerable 2026-06-08 06:23:46.658335 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-4576 vulnerable 2026-06-08 06:16:13.486781 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-4573 vulnerable 2026-06-08 06:16:13.484314 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-4057 vulnerable 2026-06-08 06:16:11.253842 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-4051 vulnerable 2026-06-08 06:16:11.242790 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-7317 vulnerable 2026-06-08 05:14:14.267617 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-17689 vulnerable 2026-06-08 05:09:09.750389 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-17688 vulnerable 2026-06-08 05:09:09.740478 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.