TE
Product
Thunderbird Esr
On CISA KEVExploited in the wild
228
CVEs
2
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 6High 6Medium 6Low 0
Watch
Add Thunderbird Esr to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2013-1675 In wildKEV | 6.5 | May 16 | Mozilla Firefox Information Disclosure Vulnerability Affected: 17.0 before 17.0.6 |
| CVE-2018-5185 | 6.5 | Jun 11 | Plaintext of decrypted emails can leak through by user submitting an embedded form Affected: before 52.8.0 |
| CVE-2013-2566 | 5.9 | Mar 15 | The RC4 algorithm, as used in the TLS protocol and SSL protocol, has many single-byte biases, which makes it easier for remote attackers to conduct plaintext-recovery attacks via… Affected: before 17.0.11 |
| CVE-2018-5168 | 5.3 | Jun 11 | Sites can bypass security checks on permissions to install lightweight themes by manipulating the "baseURI" property of the theme element Affected: before 52.8.0 |
| CVE-2018-5170 | 4.3 | Jun 11 | It is possible to spoof the filename of an attachment and display an arbitrary attachment name Affected: before 52.8.0 |
| CVE-2018-5161 | 4.3 | Jun 11 | Crafted message headers can cause a Thunderbird process to hang on receiving the message Affected: before 52.8 |
Showing 6