Approved changes feed: RSS · Atom

cpe:2.3:a:mozilla:thunderbird:31.0:*:*:*:*:*:*:*

part: a version: 31.0 update: *

VendorMozilla (be1b0d4e-21a7-5a25-9982-bbda6ef43ec1)
ProductThunderbird (e5553559-8c71-58cd-a1a6-c5f5cf77e32f)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:deb/debian/thunderbird purl2cpe 2026-06-01 10:17:53.923180
pkg:mozilla/comm-central purl2cpe 2026-06-01 10:17:53.923182
pkg:rpm/fedora/thunderbird purl2cpe 2026-06-01 10:17:53.923183
pkg:rpm/opensuse/mozillathunderbird purl2cpe 2026-06-01 10:17:53.923185

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2015-0836 vulnerable 2026-06-08 05:06:23.917680 Details available
Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 36.0, Firefox ESR 31.x before 31.5, and Thunderbird before 31.5 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.
Published: 2015-02-25T11:00:00.000Z
Updated: 2024-08-06T04:26:10.603Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-0833 vulnerable 2026-06-08 05:06:23.903307 Details available
Multiple untrusted search path vulnerabilities in updater.exe in Mozilla Firefox before 36.0, Firefox ESR 31.x before 31.5, and Thunderbird before 31.5 on Windows, when the Maintenance Service is not used, allow local users to gain privileges via a Trojan horse DLL in (1) the current working directory or (2) a temporary directory, as demonstrated by bcrypt.dll.
Published: 2015-02-25T11:00:00.000Z
Updated: 2024-08-06T04:26:11.160Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-0831 vulnerable 2026-06-08 05:06:23.310428 Details available
Use-after-free vulnerability in the mozilla::dom::IndexedDB::IDBObjectStore::CreateIndex function in Mozilla Firefox before 36.0, Firefox ESR 31.x before 31.5, and Thunderbird before 31.5 allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via crafted content that is improperly handled during IndexedDB index creation.
Published: 2015-02-25T11:00:00.000Z
Updated: 2024-08-06T04:26:10.736Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-0827 vulnerable 2026-06-08 05:06:23.276532 Details available
Heap-based buffer overflow in the mozilla::gfx::CopyRect function in Mozilla Firefox before 36.0, Firefox ESR 31.x before 31.5, and Thunderbird before 31.5 allows remote attackers to obtain sensitive information from uninitialized process memory via a malformed SVG graphic.
Published: 2015-02-25T11:00:00.000Z
Updated: 2024-08-06T04:26:10.843Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-0822 vulnerable 2026-06-08 05:06:23.228371 Details available
The Form Autocompletion feature in Mozilla Firefox before 36.0, Firefox ESR 31.x before 31.5, and Thunderbird before 31.5 allows remote attackers to read arbitrary files via crafted JavaScript code.
Published: 2015-02-25T11:00:00.000Z
Updated: 2024-08-06T04:26:11.050Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-1586 vulnerable 2026-06-08 05:05:25.619906 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-1585 vulnerable 2026-06-08 05:05:25.619179 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-1581 vulnerable 2026-06-08 05:05:25.617075 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-1578 vulnerable 2026-06-08 05:05:25.615900 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-1577 vulnerable 2026-06-08 05:05:25.615175 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-1576 vulnerable 2026-06-08 05:05:25.613964 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-1574 vulnerable 2026-06-08 05:05:25.612761 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-1568 vulnerable 2026-06-08 05:05:25.556036 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-1567 vulnerable 2026-06-08 05:05:25.451654 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-1565 vulnerable 2026-06-08 05:05:25.450252 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-1564 vulnerable 2026-06-08 05:05:25.449774 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-1563 vulnerable 2026-06-08 05:05:25.449172 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-1562 vulnerable 2026-06-08 05:05:25.448406 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-1553 vulnerable 2026-06-08 05:05:25.425418 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.