Package Instance
Lookup for vulnerable packages by Package URL.
GET /api/packages/940994?format=api
{ "url": "http://public2.vulnerablecode.io/api/packages/940994?format=api", "purl": "pkg:deb/debian/thunderbird@1:140.3.0esr-1?distro=trixie", "type": "deb", "namespace": "debian", "name": "thunderbird", "version": "1:140.3.0esr-1", "qualifiers": { "distro": "trixie" }, "subpath": "", "is_vulnerable": false, "next_non_vulnerable_version": "1:140.4.0esr-1~deb11u1", "latest_non_vulnerable_version": "1:140.9.1esr-1", "affected_by_vulnerabilities": [], "fixing_vulnerabilities": [ { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/62921?format=api", "vulnerability_id": "VCID-3qfb-sxha-v3cw", "summary": "Same-origin policy bypass in the Layout component. This vulnerability affects Firefox < 143, Firefox ESR < 140.3, Thunderbird < 143, and Thunderbird < 140.3.", "references": [ { "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2025-10529.json", "reference_id": "", "reference_type": "", "scores": [ { "value": "6.1", "scoring_system": "cvssv3", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" } ], "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2025-10529.json" }, { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2025-10529", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00055", "scoring_system": "epss", "scoring_elements": "0.17358", "published_at": "2026-04-04T12:55:00Z" }, { "value": "0.00055", "scoring_system": "epss", "scoring_elements": "0.1731", "published_at": "2026-04-02T12:55:00Z" }, { "value": "0.00055", "scoring_system": "epss", "scoring_elements": "0.17265", "published_at": "2026-04-11T12:55:00Z" }, { "value": "0.00055", "scoring_system": "epss", "scoring_elements": "0.17286", "published_at": "2026-04-09T12:55:00Z" }, { "value": "0.00055", "scoring_system": "epss", "scoring_elements": "0.17229", "published_at": "2026-04-08T12:55:00Z" }, { "value": "0.00055", "scoring_system": "epss", "scoring_elements": "0.17137", "published_at": "2026-04-07T12:55:00Z" }, { "value": "0.0006", "scoring_system": "epss", "scoring_elements": "0.18609", "published_at": "2026-04-24T12:55:00Z" }, { "value": "0.00063", "scoring_system": "epss", "scoring_elements": "0.19544", "published_at": "2026-04-12T12:55:00Z" }, { "value": "0.00063", "scoring_system": "epss", "scoring_elements": "0.19446", "published_at": "2026-04-16T12:55:00Z" }, { "value": "0.00063", "scoring_system": "epss", "scoring_elements": "0.19485", "published_at": "2026-04-13T12:55:00Z" }, { "value": "0.00063", "scoring_system": "epss", "scoring_elements": "0.19467", "published_at": "2026-04-21T12:55:00Z" }, { "value": "0.00063", "scoring_system": "epss", "scoring_elements": "0.19454", "published_at": "2026-04-18T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2025-10529" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-10529", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-10529" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=2395756", "reference_id": "2395756", "reference_type": "", "scores": [], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2395756" }, { "reference_url": "https://www.mozilla.org/en-US/security/advisories/mfsa2025-73", "reference_id": "mfsa2025-73", "reference_type": "", "scores": [ { "value": "high", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://www.mozilla.org/en-US/security/advisories/mfsa2025-73" }, { "reference_url": "https://www.mozilla.org/security/advisories/mfsa2025-73/", "reference_id": "mfsa2025-73", "reference_type": "", "scores": [ { "value": "6.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2025-09-17T17:44:09Z/" } ], "url": "https://www.mozilla.org/security/advisories/mfsa2025-73/" }, { "reference_url": "https://www.mozilla.org/en-US/security/advisories/mfsa2025-75", "reference_id": "mfsa2025-75", "reference_type": "", "scores": [ { "value": "high", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://www.mozilla.org/en-US/security/advisories/mfsa2025-75" }, { "reference_url": "https://www.mozilla.org/security/advisories/mfsa2025-75/", "reference_id": "mfsa2025-75", "reference_type": "", "scores": [ { "value": "6.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2025-09-17T17:44:09Z/" } ], "url": "https://www.mozilla.org/security/advisories/mfsa2025-75/" }, { "reference_url": "https://www.mozilla.org/en-US/security/advisories/mfsa2025-77", "reference_id": "mfsa2025-77", "reference_type": "", "scores": [ { "value": "high", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://www.mozilla.org/en-US/security/advisories/mfsa2025-77" }, { "reference_url": "https://www.mozilla.org/security/advisories/mfsa2025-77/", "reference_id": "mfsa2025-77", "reference_type": "", "scores": [ { "value": "6.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2025-09-17T17:44:09Z/" } ], "url": "https://www.mozilla.org/security/advisories/mfsa2025-77/" }, { "reference_url": "https://www.mozilla.org/en-US/security/advisories/mfsa2025-78", "reference_id": "mfsa2025-78", "reference_type": "", "scores": [ { "value": "high", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://www.mozilla.org/en-US/security/advisories/mfsa2025-78" }, { "reference_url": "https://www.mozilla.org/security/advisories/mfsa2025-78/", "reference_id": "mfsa2025-78", "reference_type": "", "scores": [ { "value": "6.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2025-09-17T17:44:09Z/" } ], "url": "https://www.mozilla.org/security/advisories/mfsa2025-78/" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2025:16108", "reference_id": "RHSA-2025:16108", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2025:16108" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2025:16109", "reference_id": "RHSA-2025:16109", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2025:16109" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2025:16156", "reference_id": "RHSA-2025:16156", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2025:16156" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2025:16157", "reference_id": "RHSA-2025:16157", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2025:16157" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2025:16260", "reference_id": "RHSA-2025:16260", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2025:16260" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2025:16589", "reference_id": "RHSA-2025:16589", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2025:16589" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2025:17340", "reference_id": "RHSA-2025:17340", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2025:17340" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2025:17341", "reference_id": "RHSA-2025:17341", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2025:17341" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2025:17342", "reference_id": "RHSA-2025:17342", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2025:17342" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2025:17343", "reference_id": "RHSA-2025:17343", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2025:17343" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2025:17344", "reference_id": "RHSA-2025:17344", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2025:17344" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2025:17345", "reference_id": "RHSA-2025:17345", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2025:17345" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2025:17346", "reference_id": "RHSA-2025:17346", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2025:17346" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2025:17367", "reference_id": "RHSA-2025:17367", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2025:17367" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2025:17368", "reference_id": "RHSA-2025:17368", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2025:17368" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2025:17371", "reference_id": "RHSA-2025:17371", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2025:17371" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2025:17372", "reference_id": "RHSA-2025:17372", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2025:17372" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2025:17373", "reference_id": "RHSA-2025:17373", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2025:17373" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2025:17374", "reference_id": "RHSA-2025:17374", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2025:17374" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2025:17378", "reference_id": "RHSA-2025:17378", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2025:17378" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2025:17453", "reference_id": "RHSA-2025:17453", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2025:17453" }, { "reference_url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1970490", "reference_id": "show_bug.cgi?id=1970490", "reference_type": "", "scores": [ { "value": "6.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2025-09-17T17:44:09Z/" } ], "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1970490" }, { "reference_url": "https://usn.ubuntu.com/7991-1/", "reference_id": "USN-7991-1", "reference_type": "", "scores": [], "url": "https://usn.ubuntu.com/7991-1/" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/940802?format=api", "purl": "pkg:deb/debian/thunderbird@1:115.12.0-1~deb11u1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/thunderbird@1:115.12.0-1~deb11u1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/940993?format=api", "purl": "pkg:deb/debian/thunderbird@1:140.3.0esr-1~deb11u1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/thunderbird@1:140.3.0esr-1~deb11u1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/940992?format=api", "purl": "pkg:deb/debian/thunderbird@1:140.3.0esr-1~deb12u1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/thunderbird@1:140.3.0esr-1~deb12u1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/940995?format=api", "purl": "pkg:deb/debian/thunderbird@1:140.3.0esr-1~deb13u1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/thunderbird@1:140.3.0esr-1~deb13u1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/940994?format=api", "purl": "pkg:deb/debian/thunderbird@1:140.3.0esr-1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/thunderbird@1:140.3.0esr-1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/940800?format=api", "purl": "pkg:deb/debian/thunderbird@1:140.6.0esr-1~deb12u1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/thunderbird@1:140.6.0esr-1~deb12u1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/940804?format=api", "purl": "pkg:deb/debian/thunderbird@1:140.8.0esr-1~deb13u1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/thunderbird@1:140.8.0esr-1~deb13u1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/940803?format=api", "purl": "pkg:deb/debian/thunderbird@1:140.9.0esr-1?distro=trixie", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-5dw5-vpt8-zqbz" }, { "vulnerability": "VCID-9ag7-z86d-nba9" }, { "vulnerability": "VCID-qbzp-euvv-q7c7" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/thunderbird@1:140.9.0esr-1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/1067638?format=api", "purl": "pkg:deb/debian/thunderbird@1:140.9.1esr-1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/thunderbird@1:140.9.1esr-1%3Fdistro=trixie" } ], "aliases": [ "CVE-2025-10529" ], "risk_score": 4.0, "exploitability": "0.5", "weighted_severity": "8.0", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-3qfb-sxha-v3cw" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/62920?format=api", "vulnerability_id": "VCID-66z1-8zeg-9qh1", "summary": "Sandbox escape due to undefined behavior, invalid pointer in the Graphics: Canvas2D component. This vulnerability affects Firefox < 143, Firefox ESR < 140.3, Thunderbird < 143, and Thunderbird < 140.3.", "references": [ { "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2025-10528.json", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" } ], "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2025-10528.json" }, { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2025-10528", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00079", "scoring_system": "epss", "scoring_elements": "0.2365", "published_at": "2026-04-04T12:55:00Z" }, { "value": "0.00079", "scoring_system": "epss", "scoring_elements": "0.23612", "published_at": "2026-04-02T12:55:00Z" }, { "value": "0.00079", "scoring_system": "epss", "scoring_elements": "0.23566", "published_at": "2026-04-11T12:55:00Z" }, { "value": "0.00079", "scoring_system": "epss", "scoring_elements": "0.23548", "published_at": "2026-04-09T12:55:00Z" }, { "value": "0.00079", "scoring_system": "epss", "scoring_elements": "0.23499", "published_at": "2026-04-08T12:55:00Z" }, { "value": "0.00079", "scoring_system": "epss", "scoring_elements": "0.23428", "published_at": "2026-04-07T12:55:00Z" }, { "value": "0.00088", "scoring_system": "epss", "scoring_elements": "0.25073", "published_at": "2026-04-24T12:55:00Z" }, { "value": "0.00092", "scoring_system": "epss", "scoring_elements": "0.25982", "published_at": "2026-04-12T12:55:00Z" }, { "value": "0.00092", "scoring_system": "epss", "scoring_elements": "0.25929", "published_at": "2026-04-16T12:55:00Z" }, { "value": "0.00092", "scoring_system": "epss", "scoring_elements": "0.25924", "published_at": "2026-04-13T12:55:00Z" }, { "value": "0.00092", "scoring_system": "epss", "scoring_elements": "0.25881", "published_at": "2026-04-21T12:55:00Z" }, { "value": "0.00092", "scoring_system": "epss", "scoring_elements": "0.2591", "published_at": "2026-04-18T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2025-10528" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-10528", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-10528" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=2395755", "reference_id": "2395755", "reference_type": "", "scores": [], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2395755" }, { "reference_url": "https://www.mozilla.org/en-US/security/advisories/mfsa2025-73", "reference_id": "mfsa2025-73", "reference_type": "", "scores": [ { "value": "high", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://www.mozilla.org/en-US/security/advisories/mfsa2025-73" }, { "reference_url": "https://www.mozilla.org/security/advisories/mfsa2025-73/", "reference_id": "mfsa2025-73", "reference_type": "", "scores": [ { "value": "7.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2025-09-17T18:02:06Z/" } ], "url": "https://www.mozilla.org/security/advisories/mfsa2025-73/" }, { "reference_url": "https://www.mozilla.org/en-US/security/advisories/mfsa2025-75", "reference_id": "mfsa2025-75", "reference_type": "", "scores": [ { "value": "high", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://www.mozilla.org/en-US/security/advisories/mfsa2025-75" }, { "reference_url": "https://www.mozilla.org/security/advisories/mfsa2025-75/", "reference_id": "mfsa2025-75", "reference_type": "", "scores": [ { "value": "7.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2025-09-17T18:02:06Z/" } ], "url": "https://www.mozilla.org/security/advisories/mfsa2025-75/" }, { "reference_url": "https://www.mozilla.org/en-US/security/advisories/mfsa2025-77", "reference_id": "mfsa2025-77", "reference_type": "", "scores": [ { "value": "high", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://www.mozilla.org/en-US/security/advisories/mfsa2025-77" }, { "reference_url": "https://www.mozilla.org/security/advisories/mfsa2025-77/", "reference_id": "mfsa2025-77", "reference_type": "", "scores": [ { "value": "7.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2025-09-17T18:02:06Z/" } ], "url": "https://www.mozilla.org/security/advisories/mfsa2025-77/" }, { "reference_url": "https://www.mozilla.org/en-US/security/advisories/mfsa2025-78", "reference_id": "mfsa2025-78", "reference_type": "", "scores": [ { "value": "high", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://www.mozilla.org/en-US/security/advisories/mfsa2025-78" }, { "reference_url": "https://www.mozilla.org/security/advisories/mfsa2025-78/", "reference_id": "mfsa2025-78", "reference_type": "", "scores": [ { "value": "7.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2025-09-17T18:02:06Z/" } ], "url": "https://www.mozilla.org/security/advisories/mfsa2025-78/" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2025:16108", "reference_id": "RHSA-2025:16108", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2025:16108" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2025:16109", "reference_id": "RHSA-2025:16109", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2025:16109" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2025:16156", "reference_id": "RHSA-2025:16156", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2025:16156" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2025:16157", "reference_id": "RHSA-2025:16157", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2025:16157" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2025:16260", "reference_id": "RHSA-2025:16260", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2025:16260" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2025:16589", "reference_id": "RHSA-2025:16589", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2025:16589" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2025:17340", "reference_id": "RHSA-2025:17340", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2025:17340" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2025:17341", "reference_id": "RHSA-2025:17341", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2025:17341" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2025:17342", "reference_id": "RHSA-2025:17342", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2025:17342" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2025:17343", "reference_id": "RHSA-2025:17343", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2025:17343" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2025:17344", "reference_id": "RHSA-2025:17344", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2025:17344" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2025:17345", "reference_id": "RHSA-2025:17345", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2025:17345" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2025:17346", "reference_id": "RHSA-2025:17346", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2025:17346" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2025:17367", "reference_id": "RHSA-2025:17367", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2025:17367" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2025:17368", "reference_id": "RHSA-2025:17368", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2025:17368" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2025:17371", "reference_id": "RHSA-2025:17371", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2025:17371" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2025:17372", "reference_id": "RHSA-2025:17372", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2025:17372" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2025:17373", "reference_id": "RHSA-2025:17373", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2025:17373" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2025:17374", "reference_id": "RHSA-2025:17374", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2025:17374" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2025:17378", "reference_id": "RHSA-2025:17378", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2025:17378" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2025:17453", "reference_id": "RHSA-2025:17453", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2025:17453" }, { "reference_url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1986185", "reference_id": "show_bug.cgi?id=1986185", "reference_type": "", "scores": [ { "value": "7.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2025-09-17T18:02:06Z/" } ], "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1986185" }, { "reference_url": "https://usn.ubuntu.com/7991-1/", "reference_id": "USN-7991-1", "reference_type": "", "scores": [], "url": "https://usn.ubuntu.com/7991-1/" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/940802?format=api", "purl": "pkg:deb/debian/thunderbird@1:115.12.0-1~deb11u1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/thunderbird@1:115.12.0-1~deb11u1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/940993?format=api", "purl": "pkg:deb/debian/thunderbird@1:140.3.0esr-1~deb11u1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/thunderbird@1:140.3.0esr-1~deb11u1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/940992?format=api", "purl": "pkg:deb/debian/thunderbird@1:140.3.0esr-1~deb12u1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/thunderbird@1:140.3.0esr-1~deb12u1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/940995?format=api", "purl": "pkg:deb/debian/thunderbird@1:140.3.0esr-1~deb13u1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/thunderbird@1:140.3.0esr-1~deb13u1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/940994?format=api", "purl": "pkg:deb/debian/thunderbird@1:140.3.0esr-1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/thunderbird@1:140.3.0esr-1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/940800?format=api", "purl": "pkg:deb/debian/thunderbird@1:140.6.0esr-1~deb12u1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/thunderbird@1:140.6.0esr-1~deb12u1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/940804?format=api", "purl": "pkg:deb/debian/thunderbird@1:140.8.0esr-1~deb13u1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/thunderbird@1:140.8.0esr-1~deb13u1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/940803?format=api", "purl": "pkg:deb/debian/thunderbird@1:140.9.0esr-1?distro=trixie", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-5dw5-vpt8-zqbz" }, { "vulnerability": "VCID-9ag7-z86d-nba9" }, { "vulnerability": "VCID-qbzp-euvv-q7c7" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/thunderbird@1:140.9.0esr-1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/1067638?format=api", "purl": "pkg:deb/debian/thunderbird@1:140.9.1esr-1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/thunderbird@1:140.9.1esr-1%3Fdistro=trixie" } ], "aliases": [ "CVE-2025-10528" ], "risk_score": 4.0, "exploitability": "0.5", "weighted_severity": "8.0", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-66z1-8zeg-9qh1" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/62925?format=api", "vulnerability_id": "VCID-93au-w2zh-3yhg", "summary": "Integer overflow in the SVG component. This vulnerability affects Firefox < 143, Firefox ESR < 115.28, Firefox ESR < 140.3, Thunderbird < 143, and Thunderbird < 140.3.", "references": [ { "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2025-10533.json", "reference_id": "", "reference_type": "", "scores": [ { "value": "6.1", "scoring_system": "cvssv3", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" } ], "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2025-10533.json" }, { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2025-10533", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00084", "scoring_system": "epss", "scoring_elements": "0.24553", "published_at": "2026-04-04T12:55:00Z" }, { "value": "0.00084", "scoring_system": "epss", "scoring_elements": "0.24518", "published_at": "2026-04-02T12:55:00Z" }, { "value": "0.00084", "scoring_system": "epss", "scoring_elements": "0.24463", "published_at": "2026-04-11T12:55:00Z" }, { "value": "0.00084", "scoring_system": "epss", "scoring_elements": "0.24448", "published_at": "2026-04-09T12:55:00Z" }, { "value": "0.00084", "scoring_system": "epss", "scoring_elements": "0.24403", "published_at": "2026-04-08T12:55:00Z" }, { "value": "0.00084", "scoring_system": "epss", "scoring_elements": "0.24335", "published_at": "2026-04-07T12:55:00Z" }, { "value": "0.00091", "scoring_system": "epss", "scoring_elements": "0.25613", "published_at": "2026-04-24T12:55:00Z" }, { "value": "0.00096", "scoring_system": "epss", "scoring_elements": "0.26517", "published_at": "2026-04-13T12:55:00Z" }, { "value": "0.00096", "scoring_system": "epss", "scoring_elements": "0.26459", "published_at": "2026-04-21T12:55:00Z" }, { "value": "0.00096", "scoring_system": "epss", "scoring_elements": "0.26497", "published_at": "2026-04-18T12:55:00Z" }, { "value": "0.00096", "scoring_system": "epss", "scoring_elements": "0.26524", "published_at": "2026-04-16T12:55:00Z" }, { "value": "0.00096", "scoring_system": "epss", "scoring_elements": "0.26574", "published_at": "2026-04-12T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2025-10533" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-10533", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-10533" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=2395766", "reference_id": "2395766", "reference_type": "", "scores": [], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2395766" }, { "reference_url": "https://www.mozilla.org/en-US/security/advisories/mfsa2025-73", "reference_id": "mfsa2025-73", "reference_type": "", "scores": [ { "value": "high", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://www.mozilla.org/en-US/security/advisories/mfsa2025-73" }, { "reference_url": "https://www.mozilla.org/security/advisories/mfsa2025-73/", "reference_id": "mfsa2025-73", "reference_type": "", "scores": [ { "value": "8.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2025-09-16T13:44:57Z/" } ], "url": "https://www.mozilla.org/security/advisories/mfsa2025-73/" }, { "reference_url": "https://www.mozilla.org/en-US/security/advisories/mfsa2025-74", "reference_id": "mfsa2025-74", "reference_type": "", "scores": [ { "value": "none", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://www.mozilla.org/en-US/security/advisories/mfsa2025-74" }, { "reference_url": "https://www.mozilla.org/security/advisories/mfsa2025-74/", "reference_id": "mfsa2025-74", "reference_type": "", "scores": [ { "value": "8.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2025-09-16T13:44:57Z/" } ], "url": "https://www.mozilla.org/security/advisories/mfsa2025-74/" }, { "reference_url": "https://www.mozilla.org/en-US/security/advisories/mfsa2025-75", "reference_id": "mfsa2025-75", "reference_type": "", "scores": [ { "value": "high", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://www.mozilla.org/en-US/security/advisories/mfsa2025-75" }, { "reference_url": "https://www.mozilla.org/security/advisories/mfsa2025-75/", "reference_id": "mfsa2025-75", "reference_type": "", "scores": [ { "value": "8.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2025-09-16T13:44:57Z/" } ], "url": "https://www.mozilla.org/security/advisories/mfsa2025-75/" }, { "reference_url": "https://www.mozilla.org/en-US/security/advisories/mfsa2025-77", "reference_id": "mfsa2025-77", "reference_type": "", "scores": [ { "value": "high", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://www.mozilla.org/en-US/security/advisories/mfsa2025-77" }, { "reference_url": "https://www.mozilla.org/security/advisories/mfsa2025-77/", "reference_id": "mfsa2025-77", "reference_type": "", "scores": [ { "value": "8.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2025-09-16T13:44:57Z/" } ], "url": "https://www.mozilla.org/security/advisories/mfsa2025-77/" }, { "reference_url": "https://www.mozilla.org/en-US/security/advisories/mfsa2025-78", "reference_id": "mfsa2025-78", "reference_type": "", "scores": [ { "value": "high", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://www.mozilla.org/en-US/security/advisories/mfsa2025-78" }, { "reference_url": "https://www.mozilla.org/security/advisories/mfsa2025-78/", "reference_id": "mfsa2025-78", "reference_type": "", "scores": [ { "value": "8.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2025-09-16T13:44:57Z/" } ], "url": "https://www.mozilla.org/security/advisories/mfsa2025-78/" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2025:16108", "reference_id": "RHSA-2025:16108", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2025:16108" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2025:16109", "reference_id": "RHSA-2025:16109", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2025:16109" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2025:16156", "reference_id": "RHSA-2025:16156", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2025:16156" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2025:16157", "reference_id": "RHSA-2025:16157", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2025:16157" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2025:16260", "reference_id": "RHSA-2025:16260", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2025:16260" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2025:16589", "reference_id": "RHSA-2025:16589", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2025:16589" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2025:17340", "reference_id": "RHSA-2025:17340", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2025:17340" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2025:17341", "reference_id": "RHSA-2025:17341", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2025:17341" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2025:17342", "reference_id": "RHSA-2025:17342", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2025:17342" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2025:17343", "reference_id": "RHSA-2025:17343", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2025:17343" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2025:17344", "reference_id": "RHSA-2025:17344", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2025:17344" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2025:17345", "reference_id": "RHSA-2025:17345", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2025:17345" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2025:17346", "reference_id": "RHSA-2025:17346", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2025:17346" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2025:17367", "reference_id": "RHSA-2025:17367", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2025:17367" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2025:17368", "reference_id": "RHSA-2025:17368", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2025:17368" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2025:17371", "reference_id": "RHSA-2025:17371", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2025:17371" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2025:17372", "reference_id": "RHSA-2025:17372", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2025:17372" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2025:17373", "reference_id": "RHSA-2025:17373", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2025:17373" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2025:17374", "reference_id": "RHSA-2025:17374", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2025:17374" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2025:17378", "reference_id": "RHSA-2025:17378", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2025:17378" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2025:17453", "reference_id": "RHSA-2025:17453", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2025:17453" }, { "reference_url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1980788", "reference_id": "show_bug.cgi?id=1980788", "reference_type": "", "scores": [ { "value": "8.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2025-09-16T13:44:57Z/" } ], "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1980788" }, { "reference_url": "https://usn.ubuntu.com/7991-1/", "reference_id": "USN-7991-1", "reference_type": "", "scores": [], "url": "https://usn.ubuntu.com/7991-1/" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/940802?format=api", "purl": "pkg:deb/debian/thunderbird@1:115.12.0-1~deb11u1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/thunderbird@1:115.12.0-1~deb11u1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/940993?format=api", "purl": "pkg:deb/debian/thunderbird@1:140.3.0esr-1~deb11u1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/thunderbird@1:140.3.0esr-1~deb11u1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/940992?format=api", "purl": "pkg:deb/debian/thunderbird@1:140.3.0esr-1~deb12u1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/thunderbird@1:140.3.0esr-1~deb12u1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/940995?format=api", "purl": "pkg:deb/debian/thunderbird@1:140.3.0esr-1~deb13u1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/thunderbird@1:140.3.0esr-1~deb13u1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/940994?format=api", "purl": "pkg:deb/debian/thunderbird@1:140.3.0esr-1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/thunderbird@1:140.3.0esr-1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/940800?format=api", "purl": "pkg:deb/debian/thunderbird@1:140.6.0esr-1~deb12u1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/thunderbird@1:140.6.0esr-1~deb12u1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/940804?format=api", "purl": "pkg:deb/debian/thunderbird@1:140.8.0esr-1~deb13u1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/thunderbird@1:140.8.0esr-1~deb13u1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/940803?format=api", "purl": "pkg:deb/debian/thunderbird@1:140.9.0esr-1?distro=trixie", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-5dw5-vpt8-zqbz" }, { "vulnerability": "VCID-9ag7-z86d-nba9" }, { "vulnerability": "VCID-qbzp-euvv-q7c7" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/thunderbird@1:140.9.0esr-1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/1067638?format=api", "purl": "pkg:deb/debian/thunderbird@1:140.9.1esr-1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/thunderbird@1:140.9.1esr-1%3Fdistro=trixie" } ], "aliases": [ "CVE-2025-10533" ], "risk_score": 4.0, "exploitability": "0.5", "weighted_severity": "8.0", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-93au-w2zh-3yhg" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/62929?format=api", "vulnerability_id": "VCID-c6rx-p235-9bdz", "summary": "Memory safety bugs present in Firefox ESR 140.2, Thunderbird ESR 140.2, Firefox 142 and Thunderbird 142. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code.", "references": [ { "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2025-10537.json", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" } ], "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2025-10537.json" }, { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2025-10537", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.0006", "scoring_system": "epss", "scoring_elements": "0.18899", "published_at": "2026-04-04T12:55:00Z" }, { "value": "0.0006", "scoring_system": "epss", "scoring_elements": "0.18846", "published_at": "2026-04-02T12:55:00Z" }, { "value": "0.0006", "scoring_system": "epss", "scoring_elements": "0.18758", "published_at": "2026-04-11T12:55:00Z" }, { "value": "0.0006", "scoring_system": "epss", "scoring_elements": "0.18753", "published_at": "2026-04-09T12:55:00Z" }, { "value": "0.0006", "scoring_system": "epss", "scoring_elements": "0.18699", "published_at": "2026-04-08T12:55:00Z" }, { "value": "0.0006", "scoring_system": "epss", "scoring_elements": "0.18619", "published_at": "2026-04-07T12:55:00Z" }, { "value": "0.00065", "scoring_system": "epss", "scoring_elements": "0.20083", "published_at": "2026-04-24T12:55:00Z" }, { "value": "0.00068", "scoring_system": "epss", "scoring_elements": "0.21091", "published_at": "2026-04-12T12:55:00Z" }, { "value": "0.00068", "scoring_system": "epss", "scoring_elements": "0.2103", "published_at": "2026-04-16T12:55:00Z" }, { "value": "0.00068", "scoring_system": "epss", "scoring_elements": "0.21039", "published_at": "2026-04-13T12:55:00Z" }, { "value": "0.00068", "scoring_system": "epss", "scoring_elements": "0.21018", "published_at": "2026-04-21T12:55:00Z" }, { "value": "0.00068", "scoring_system": "epss", "scoring_elements": "0.2104", "published_at": "2026-04-18T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2025-10537" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-10537", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-10537" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=2395759", "reference_id": "2395759", "reference_type": "", "scores": [], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2395759" }, { "reference_url": "https://bugzilla.mozilla.org/buglist.cgi?bug_id=1938220%2C1980730%2C1981280%2C1981283%2C1984505%2C1985067", "reference_id": "buglist.cgi?bug_id=1938220%2C1980730%2C1981280%2C1981283%2C1984505%2C1985067", "reference_type": "", "scores": [ { "value": "8.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2025-09-17T03:55:49Z/" } ], "url": "https://bugzilla.mozilla.org/buglist.cgi?bug_id=1938220%2C1980730%2C1981280%2C1981283%2C1984505%2C1985067" }, { "reference_url": "https://www.mozilla.org/en-US/security/advisories/mfsa2025-73", "reference_id": "mfsa2025-73", "reference_type": "", "scores": [ { "value": "high", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://www.mozilla.org/en-US/security/advisories/mfsa2025-73" }, { "reference_url": "https://www.mozilla.org/security/advisories/mfsa2025-73/", "reference_id": "mfsa2025-73", "reference_type": "", "scores": [ { "value": "8.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2025-09-17T03:55:49Z/" } ], "url": "https://www.mozilla.org/security/advisories/mfsa2025-73/" }, { "reference_url": "https://www.mozilla.org/en-US/security/advisories/mfsa2025-75", "reference_id": "mfsa2025-75", "reference_type": "", "scores": [ { "value": "high", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://www.mozilla.org/en-US/security/advisories/mfsa2025-75" }, { "reference_url": "https://www.mozilla.org/security/advisories/mfsa2025-75/", "reference_id": "mfsa2025-75", "reference_type": "", "scores": [ { "value": "8.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2025-09-17T03:55:49Z/" } ], "url": "https://www.mozilla.org/security/advisories/mfsa2025-75/" }, { "reference_url": "https://www.mozilla.org/en-US/security/advisories/mfsa2025-77", "reference_id": "mfsa2025-77", "reference_type": "", "scores": [ { "value": "high", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://www.mozilla.org/en-US/security/advisories/mfsa2025-77" }, { "reference_url": "https://www.mozilla.org/security/advisories/mfsa2025-77/", "reference_id": "mfsa2025-77", "reference_type": "", "scores": [ { "value": "8.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2025-09-17T03:55:49Z/" } ], "url": "https://www.mozilla.org/security/advisories/mfsa2025-77/" }, { "reference_url": "https://www.mozilla.org/en-US/security/advisories/mfsa2025-78", "reference_id": "mfsa2025-78", "reference_type": "", "scores": [ { "value": "high", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://www.mozilla.org/en-US/security/advisories/mfsa2025-78" }, { "reference_url": "https://www.mozilla.org/security/advisories/mfsa2025-78/", "reference_id": "mfsa2025-78", "reference_type": "", "scores": [ { "value": "8.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2025-09-17T03:55:49Z/" } ], "url": "https://www.mozilla.org/security/advisories/mfsa2025-78/" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2025:16108", "reference_id": "RHSA-2025:16108", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2025:16108" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2025:16109", "reference_id": "RHSA-2025:16109", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2025:16109" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2025:16156", "reference_id": "RHSA-2025:16156", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2025:16156" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2025:16157", "reference_id": "RHSA-2025:16157", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2025:16157" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2025:16260", "reference_id": "RHSA-2025:16260", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2025:16260" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2025:16589", "reference_id": "RHSA-2025:16589", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2025:16589" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2025:17340", "reference_id": "RHSA-2025:17340", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2025:17340" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2025:17341", "reference_id": "RHSA-2025:17341", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2025:17341" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2025:17342", "reference_id": "RHSA-2025:17342", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2025:17342" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2025:17343", "reference_id": "RHSA-2025:17343", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2025:17343" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2025:17344", "reference_id": "RHSA-2025:17344", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2025:17344" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2025:17345", "reference_id": "RHSA-2025:17345", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2025:17345" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2025:17346", "reference_id": "RHSA-2025:17346", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2025:17346" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2025:17367", "reference_id": "RHSA-2025:17367", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2025:17367" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2025:17368", "reference_id": "RHSA-2025:17368", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2025:17368" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2025:17371", "reference_id": "RHSA-2025:17371", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2025:17371" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2025:17372", "reference_id": "RHSA-2025:17372", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2025:17372" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2025:17373", "reference_id": "RHSA-2025:17373", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2025:17373" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2025:17374", "reference_id": "RHSA-2025:17374", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2025:17374" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2025:17378", "reference_id": "RHSA-2025:17378", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2025:17378" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2025:17453", "reference_id": "RHSA-2025:17453", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2025:17453" }, { "reference_url": "https://usn.ubuntu.com/7991-1/", "reference_id": "USN-7991-1", "reference_type": "", "scores": [], "url": "https://usn.ubuntu.com/7991-1/" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/940802?format=api", "purl": "pkg:deb/debian/thunderbird@1:115.12.0-1~deb11u1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/thunderbird@1:115.12.0-1~deb11u1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/940993?format=api", "purl": "pkg:deb/debian/thunderbird@1:140.3.0esr-1~deb11u1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/thunderbird@1:140.3.0esr-1~deb11u1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/940992?format=api", "purl": "pkg:deb/debian/thunderbird@1:140.3.0esr-1~deb12u1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/thunderbird@1:140.3.0esr-1~deb12u1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/940995?format=api", "purl": "pkg:deb/debian/thunderbird@1:140.3.0esr-1~deb13u1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/thunderbird@1:140.3.0esr-1~deb13u1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/940994?format=api", "purl": "pkg:deb/debian/thunderbird@1:140.3.0esr-1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/thunderbird@1:140.3.0esr-1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/940800?format=api", "purl": "pkg:deb/debian/thunderbird@1:140.6.0esr-1~deb12u1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/thunderbird@1:140.6.0esr-1~deb12u1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/940804?format=api", "purl": "pkg:deb/debian/thunderbird@1:140.8.0esr-1~deb13u1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/thunderbird@1:140.8.0esr-1~deb13u1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/940803?format=api", "purl": "pkg:deb/debian/thunderbird@1:140.9.0esr-1?distro=trixie", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-5dw5-vpt8-zqbz" }, { "vulnerability": "VCID-9ag7-z86d-nba9" }, { "vulnerability": "VCID-qbzp-euvv-q7c7" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/thunderbird@1:140.9.0esr-1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/1067638?format=api", "purl": "pkg:deb/debian/thunderbird@1:140.9.1esr-1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/thunderbird@1:140.9.1esr-1%3Fdistro=trixie" } ], "aliases": [ "CVE-2025-10537" ], "risk_score": 4.0, "exploitability": "0.5", "weighted_severity": "8.0", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-c6rx-p235-9bdz" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/62928?format=api", "vulnerability_id": "VCID-ddwf-z514-hbbj", "summary": "Information disclosure in the Networking: Cache component. This vulnerability affects Firefox < 143, Firefox ESR < 140.3, Thunderbird < 143, and Thunderbird < 140.3.", "references": [ { "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2025-10536.json", "reference_id": "", "reference_type": "", "scores": [ { "value": "3.4", "scoring_system": "cvssv3", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:N/A:N" } ], "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2025-10536.json" }, { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2025-10536", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00018", "scoring_system": "epss", "scoring_elements": "0.04687", "published_at": "2026-04-04T12:55:00Z" }, { "value": "0.00018", "scoring_system": "epss", "scoring_elements": "0.04666", "published_at": "2026-04-02T12:55:00Z" }, { "value": "0.00018", "scoring_system": "epss", "scoring_elements": "0.04738", "published_at": "2026-04-11T12:55:00Z" }, { "value": "0.00018", "scoring_system": "epss", "scoring_elements": "0.04747", "published_at": "2026-04-09T12:55:00Z" }, { "value": "0.00018", "scoring_system": "epss", "scoring_elements": "0.04735", "published_at": "2026-04-08T12:55:00Z" }, { "value": "0.00018", "scoring_system": "epss", "scoring_elements": "0.04701", "published_at": "2026-04-07T12:55:00Z" }, { "value": "0.00021", "scoring_system": "epss", "scoring_elements": "0.05639", "published_at": "2026-04-12T12:55:00Z" }, { "value": "0.00021", "scoring_system": "epss", "scoring_elements": "0.05586", "published_at": "2026-04-16T12:55:00Z" }, { "value": "0.00021", "scoring_system": "epss", "scoring_elements": "0.05632", "published_at": "2026-04-13T12:55:00Z" }, { "value": "0.00021", "scoring_system": "epss", "scoring_elements": "0.05755", "published_at": "2026-04-21T12:55:00Z" }, { "value": "0.00021", "scoring_system": "epss", "scoring_elements": "0.05598", "published_at": "2026-04-18T12:55:00Z" }, { "value": "0.00021", "scoring_system": "epss", "scoring_elements": "0.05786", "published_at": "2026-04-24T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2025-10536" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-10536", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-10536" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=2395764", "reference_id": "2395764", "reference_type": "", "scores": [], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2395764" }, { "reference_url": "https://www.mozilla.org/en-US/security/advisories/mfsa2025-73", "reference_id": "mfsa2025-73", "reference_type": "", "scores": [ { "value": "high", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://www.mozilla.org/en-US/security/advisories/mfsa2025-73" }, { "reference_url": "https://www.mozilla.org/security/advisories/mfsa2025-73/", "reference_id": "mfsa2025-73", "reference_type": "", "scores": [ { "value": "6.2", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2025-09-22T17:33:10Z/" } ], "url": "https://www.mozilla.org/security/advisories/mfsa2025-73/" }, { "reference_url": "https://www.mozilla.org/en-US/security/advisories/mfsa2025-75", "reference_id": "mfsa2025-75", "reference_type": "", "scores": [ { "value": "high", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://www.mozilla.org/en-US/security/advisories/mfsa2025-75" }, { "reference_url": "https://www.mozilla.org/security/advisories/mfsa2025-75/", "reference_id": "mfsa2025-75", "reference_type": "", "scores": [ { "value": "6.2", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2025-09-22T17:33:10Z/" } ], "url": "https://www.mozilla.org/security/advisories/mfsa2025-75/" }, { "reference_url": "https://www.mozilla.org/en-US/security/advisories/mfsa2025-77", "reference_id": "mfsa2025-77", "reference_type": "", "scores": [ { "value": "high", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://www.mozilla.org/en-US/security/advisories/mfsa2025-77" }, { "reference_url": "https://www.mozilla.org/security/advisories/mfsa2025-77/", "reference_id": "mfsa2025-77", "reference_type": "", "scores": [ { "value": "6.2", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2025-09-22T17:33:10Z/" } ], "url": "https://www.mozilla.org/security/advisories/mfsa2025-77/" }, { "reference_url": "https://www.mozilla.org/en-US/security/advisories/mfsa2025-78", "reference_id": "mfsa2025-78", "reference_type": "", "scores": [ { "value": "high", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://www.mozilla.org/en-US/security/advisories/mfsa2025-78" }, { "reference_url": "https://www.mozilla.org/security/advisories/mfsa2025-78/", "reference_id": "mfsa2025-78", "reference_type": "", "scores": [ { "value": "6.2", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2025-09-22T17:33:10Z/" } ], "url": "https://www.mozilla.org/security/advisories/mfsa2025-78/" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2025:16108", "reference_id": "RHSA-2025:16108", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2025:16108" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2025:16109", "reference_id": "RHSA-2025:16109", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2025:16109" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2025:16156", "reference_id": "RHSA-2025:16156", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2025:16156" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2025:16157", "reference_id": "RHSA-2025:16157", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2025:16157" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2025:16260", "reference_id": "RHSA-2025:16260", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2025:16260" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2025:16589", "reference_id": "RHSA-2025:16589", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2025:16589" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2025:17340", "reference_id": "RHSA-2025:17340", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2025:17340" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2025:17341", "reference_id": "RHSA-2025:17341", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2025:17341" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2025:17342", "reference_id": "RHSA-2025:17342", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2025:17342" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2025:17343", "reference_id": "RHSA-2025:17343", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2025:17343" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2025:17344", "reference_id": "RHSA-2025:17344", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2025:17344" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2025:17345", "reference_id": "RHSA-2025:17345", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2025:17345" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2025:17346", "reference_id": "RHSA-2025:17346", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2025:17346" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2025:17367", "reference_id": "RHSA-2025:17367", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2025:17367" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2025:17368", "reference_id": "RHSA-2025:17368", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2025:17368" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2025:17371", "reference_id": "RHSA-2025:17371", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2025:17371" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2025:17372", "reference_id": "RHSA-2025:17372", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2025:17372" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2025:17373", "reference_id": "RHSA-2025:17373", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2025:17373" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2025:17374", "reference_id": "RHSA-2025:17374", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2025:17374" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2025:17378", "reference_id": "RHSA-2025:17378", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2025:17378" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2025:17453", "reference_id": "RHSA-2025:17453", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2025:17453" }, { "reference_url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1981502", "reference_id": "show_bug.cgi?id=1981502", "reference_type": "", "scores": [ { "value": "6.2", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2025-09-22T17:33:10Z/" } ], "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1981502" }, { "reference_url": "https://usn.ubuntu.com/7991-1/", "reference_id": "USN-7991-1", "reference_type": "", "scores": [], "url": "https://usn.ubuntu.com/7991-1/" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/940802?format=api", "purl": "pkg:deb/debian/thunderbird@1:115.12.0-1~deb11u1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/thunderbird@1:115.12.0-1~deb11u1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/940993?format=api", "purl": "pkg:deb/debian/thunderbird@1:140.3.0esr-1~deb11u1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/thunderbird@1:140.3.0esr-1~deb11u1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/940992?format=api", "purl": "pkg:deb/debian/thunderbird@1:140.3.0esr-1~deb12u1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/thunderbird@1:140.3.0esr-1~deb12u1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/940995?format=api", "purl": "pkg:deb/debian/thunderbird@1:140.3.0esr-1~deb13u1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/thunderbird@1:140.3.0esr-1~deb13u1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/940994?format=api", "purl": "pkg:deb/debian/thunderbird@1:140.3.0esr-1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/thunderbird@1:140.3.0esr-1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/940800?format=api", "purl": "pkg:deb/debian/thunderbird@1:140.6.0esr-1~deb12u1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/thunderbird@1:140.6.0esr-1~deb12u1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/940804?format=api", "purl": "pkg:deb/debian/thunderbird@1:140.8.0esr-1~deb13u1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/thunderbird@1:140.8.0esr-1~deb13u1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/940803?format=api", "purl": "pkg:deb/debian/thunderbird@1:140.9.0esr-1?distro=trixie", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-5dw5-vpt8-zqbz" }, { "vulnerability": "VCID-9ag7-z86d-nba9" }, { "vulnerability": "VCID-qbzp-euvv-q7c7" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/thunderbird@1:140.9.0esr-1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/1067638?format=api", "purl": "pkg:deb/debian/thunderbird@1:140.9.1esr-1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/thunderbird@1:140.9.1esr-1%3Fdistro=trixie" } ], "aliases": [ "CVE-2025-10536" ], "risk_score": 4.0, "exploitability": "0.5", "weighted_severity": "8.0", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-ddwf-z514-hbbj" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/62919?format=api", "vulnerability_id": "VCID-rg63-avu7-2bdc", "summary": "Sandbox escape due to use-after-free in the Graphics: Canvas2D component. This vulnerability affects Firefox < 143, Firefox ESR < 140.3, Thunderbird < 143, and Thunderbird < 140.3.", "references": [ { "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2025-10527.json", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" } ], "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2025-10527.json" }, { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2025-10527", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00051", "scoring_system": "epss", "scoring_elements": "0.16282", "published_at": "2026-04-04T12:55:00Z" }, { "value": "0.00051", "scoring_system": "epss", "scoring_elements": "0.16221", "published_at": "2026-04-02T12:55:00Z" }, { "value": "0.00051", "scoring_system": "epss", "scoring_elements": "0.16209", "published_at": "2026-04-11T12:55:00Z" }, { "value": "0.00051", "scoring_system": "epss", "scoring_elements": "0.16227", "published_at": "2026-04-09T12:55:00Z" }, { "value": "0.00051", "scoring_system": "epss", "scoring_elements": "0.16162", "published_at": "2026-04-08T12:55:00Z" }, { "value": "0.00051", "scoring_system": "epss", "scoring_elements": "0.16078", "published_at": "2026-04-07T12:55:00Z" }, { "value": "0.00056", "scoring_system": "epss", "scoring_elements": "0.17531", "published_at": "2026-04-24T12:55:00Z" }, { "value": "0.00059", "scoring_system": "epss", "scoring_elements": "0.18523", "published_at": "2026-04-12T12:55:00Z" }, { "value": "0.00059", "scoring_system": "epss", "scoring_elements": "0.18416", "published_at": "2026-04-16T12:55:00Z" }, { "value": "0.00059", "scoring_system": "epss", "scoring_elements": "0.18472", "published_at": "2026-04-13T12:55:00Z" }, { "value": "0.00059", "scoring_system": "epss", "scoring_elements": "0.1845", "published_at": "2026-04-21T12:55:00Z" }, { "value": "0.00059", "scoring_system": "epss", "scoring_elements": "0.18429", "published_at": "2026-04-18T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2025-10527" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-10527", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-10527" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=2395745", "reference_id": "2395745", "reference_type": "", "scores": [], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2395745" }, { "reference_url": "https://www.mozilla.org/en-US/security/advisories/mfsa2025-73", "reference_id": "mfsa2025-73", "reference_type": "", "scores": [ { "value": "high", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://www.mozilla.org/en-US/security/advisories/mfsa2025-73" }, { "reference_url": "https://www.mozilla.org/security/advisories/mfsa2025-73/", "reference_id": "mfsa2025-73", "reference_type": "", "scores": [ { "value": "7.1", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2025-09-16T13:30:33Z/" } ], "url": "https://www.mozilla.org/security/advisories/mfsa2025-73/" }, { "reference_url": "https://www.mozilla.org/en-US/security/advisories/mfsa2025-75", "reference_id": "mfsa2025-75", "reference_type": "", "scores": [ { "value": "high", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://www.mozilla.org/en-US/security/advisories/mfsa2025-75" }, { "reference_url": "https://www.mozilla.org/security/advisories/mfsa2025-75/", "reference_id": "mfsa2025-75", "reference_type": "", "scores": [ { "value": "7.1", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2025-09-16T13:30:33Z/" } ], "url": "https://www.mozilla.org/security/advisories/mfsa2025-75/" }, { "reference_url": "https://www.mozilla.org/en-US/security/advisories/mfsa2025-77", "reference_id": "mfsa2025-77", "reference_type": "", "scores": [ { "value": "high", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://www.mozilla.org/en-US/security/advisories/mfsa2025-77" }, { "reference_url": "https://www.mozilla.org/security/advisories/mfsa2025-77/", "reference_id": "mfsa2025-77", "reference_type": "", "scores": [ { "value": "7.1", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2025-09-16T13:30:33Z/" } ], "url": "https://www.mozilla.org/security/advisories/mfsa2025-77/" }, { "reference_url": "https://www.mozilla.org/en-US/security/advisories/mfsa2025-78", "reference_id": "mfsa2025-78", "reference_type": "", "scores": [ { "value": "high", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://www.mozilla.org/en-US/security/advisories/mfsa2025-78" }, { "reference_url": "https://www.mozilla.org/security/advisories/mfsa2025-78/", "reference_id": "mfsa2025-78", "reference_type": "", "scores": [ { "value": "7.1", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2025-09-16T13:30:33Z/" } ], "url": "https://www.mozilla.org/security/advisories/mfsa2025-78/" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2025:16108", "reference_id": "RHSA-2025:16108", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2025:16108" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2025:16109", "reference_id": "RHSA-2025:16109", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2025:16109" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2025:16156", "reference_id": "RHSA-2025:16156", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2025:16156" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2025:16157", "reference_id": "RHSA-2025:16157", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2025:16157" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2025:16260", "reference_id": "RHSA-2025:16260", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2025:16260" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2025:16589", "reference_id": "RHSA-2025:16589", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2025:16589" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2025:17340", "reference_id": "RHSA-2025:17340", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2025:17340" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2025:17341", "reference_id": "RHSA-2025:17341", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2025:17341" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2025:17342", "reference_id": "RHSA-2025:17342", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2025:17342" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2025:17343", "reference_id": "RHSA-2025:17343", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2025:17343" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2025:17344", "reference_id": "RHSA-2025:17344", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2025:17344" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2025:17345", "reference_id": "RHSA-2025:17345", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2025:17345" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2025:17346", "reference_id": "RHSA-2025:17346", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2025:17346" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2025:17367", "reference_id": "RHSA-2025:17367", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2025:17367" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2025:17368", "reference_id": "RHSA-2025:17368", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2025:17368" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2025:17371", "reference_id": "RHSA-2025:17371", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2025:17371" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2025:17372", "reference_id": "RHSA-2025:17372", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2025:17372" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2025:17373", "reference_id": "RHSA-2025:17373", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2025:17373" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2025:17374", "reference_id": "RHSA-2025:17374", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2025:17374" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2025:17378", "reference_id": "RHSA-2025:17378", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2025:17378" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2025:17453", "reference_id": "RHSA-2025:17453", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2025:17453" }, { "reference_url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1984825", "reference_id": "show_bug.cgi?id=1984825", "reference_type": "", "scores": [ { "value": "7.1", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2025-09-16T13:30:33Z/" } ], "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1984825" }, { "reference_url": "https://usn.ubuntu.com/7991-1/", "reference_id": "USN-7991-1", "reference_type": "", "scores": [], "url": "https://usn.ubuntu.com/7991-1/" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/940802?format=api", "purl": "pkg:deb/debian/thunderbird@1:115.12.0-1~deb11u1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/thunderbird@1:115.12.0-1~deb11u1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/940993?format=api", "purl": "pkg:deb/debian/thunderbird@1:140.3.0esr-1~deb11u1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/thunderbird@1:140.3.0esr-1~deb11u1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/940992?format=api", "purl": "pkg:deb/debian/thunderbird@1:140.3.0esr-1~deb12u1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/thunderbird@1:140.3.0esr-1~deb12u1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/940995?format=api", "purl": "pkg:deb/debian/thunderbird@1:140.3.0esr-1~deb13u1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/thunderbird@1:140.3.0esr-1~deb13u1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/940994?format=api", "purl": "pkg:deb/debian/thunderbird@1:140.3.0esr-1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/thunderbird@1:140.3.0esr-1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/940800?format=api", "purl": "pkg:deb/debian/thunderbird@1:140.6.0esr-1~deb12u1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/thunderbird@1:140.6.0esr-1~deb12u1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/940804?format=api", "purl": "pkg:deb/debian/thunderbird@1:140.8.0esr-1~deb13u1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/thunderbird@1:140.8.0esr-1~deb13u1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/940803?format=api", "purl": "pkg:deb/debian/thunderbird@1:140.9.0esr-1?distro=trixie", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-5dw5-vpt8-zqbz" }, { "vulnerability": "VCID-9ag7-z86d-nba9" }, { "vulnerability": "VCID-qbzp-euvv-q7c7" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/thunderbird@1:140.9.0esr-1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/1067638?format=api", "purl": "pkg:deb/debian/thunderbird@1:140.9.1esr-1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/thunderbird@1:140.9.1esr-1%3Fdistro=trixie" } ], "aliases": [ "CVE-2025-10527" ], "risk_score": 4.0, "exploitability": "0.5", "weighted_severity": "8.0", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-rg63-avu7-2bdc" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/62924?format=api", "vulnerability_id": "VCID-ruc1-kmaz-fkbb", "summary": "Incorrect boundary conditions in the JavaScript: GC component. This vulnerability affects Firefox < 143, Firefox ESR < 140.3, Thunderbird < 143, and Thunderbird < 140.3.", "references": [ { "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2025-10532.json", "reference_id": "", "reference_type": "", "scores": [ { "value": "6.1", "scoring_system": "cvssv3", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" } ], "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2025-10532.json" }, { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2025-10532", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00056", "scoring_system": "epss", "scoring_elements": "0.17898", "published_at": "2026-04-04T12:55:00Z" }, { "value": "0.00056", "scoring_system": "epss", "scoring_elements": "0.17844", "published_at": "2026-04-02T12:55:00Z" }, { "value": "0.00056", "scoring_system": "epss", "scoring_elements": "0.17768", "published_at": "2026-04-11T12:55:00Z" }, { "value": "0.00056", "scoring_system": "epss", "scoring_elements": "0.1775", "published_at": "2026-04-09T12:55:00Z" }, { "value": "0.00056", "scoring_system": "epss", "scoring_elements": "0.17688", "published_at": "2026-04-08T12:55:00Z" }, { "value": "0.00056", "scoring_system": "epss", "scoring_elements": "0.17599", "published_at": "2026-04-07T12:55:00Z" }, { "value": "0.00062", "scoring_system": "epss", "scoring_elements": "0.19096", "published_at": "2026-04-24T12:55:00Z" }, { "value": "0.00065", "scoring_system": "epss", "scoring_elements": "0.20125", "published_at": "2026-04-12T12:55:00Z" }, { "value": "0.00065", "scoring_system": "epss", "scoring_elements": "0.20052", "published_at": "2026-04-21T12:55:00Z" }, { "value": "0.00065", "scoring_system": "epss", "scoring_elements": "0.20054", "published_at": "2026-04-18T12:55:00Z" }, { "value": "0.00065", "scoring_system": "epss", "scoring_elements": "0.2005", "published_at": "2026-04-16T12:55:00Z" }, { "value": "0.00065", "scoring_system": "epss", "scoring_elements": "0.20067", "published_at": "2026-04-13T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2025-10532" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-10532", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-10532" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=2395754", "reference_id": "2395754", "reference_type": "", "scores": [], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2395754" }, { "reference_url": "https://www.mozilla.org/en-US/security/advisories/mfsa2025-73", "reference_id": "mfsa2025-73", "reference_type": "", "scores": [ { "value": "high", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://www.mozilla.org/en-US/security/advisories/mfsa2025-73" }, { "reference_url": "https://www.mozilla.org/security/advisories/mfsa2025-73/", "reference_id": "mfsa2025-73", "reference_type": "", "scores": [ { "value": "6.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2025-09-17T17:10:59Z/" } ], "url": "https://www.mozilla.org/security/advisories/mfsa2025-73/" }, { "reference_url": "https://www.mozilla.org/en-US/security/advisories/mfsa2025-75", "reference_id": "mfsa2025-75", "reference_type": "", "scores": [ { "value": "high", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://www.mozilla.org/en-US/security/advisories/mfsa2025-75" }, { "reference_url": "https://www.mozilla.org/security/advisories/mfsa2025-75/", "reference_id": "mfsa2025-75", "reference_type": "", "scores": [ { "value": "6.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2025-09-17T17:10:59Z/" } ], "url": "https://www.mozilla.org/security/advisories/mfsa2025-75/" }, { "reference_url": "https://www.mozilla.org/en-US/security/advisories/mfsa2025-77", "reference_id": "mfsa2025-77", "reference_type": "", "scores": [ { "value": "high", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://www.mozilla.org/en-US/security/advisories/mfsa2025-77" }, { "reference_url": "https://www.mozilla.org/security/advisories/mfsa2025-77/", "reference_id": "mfsa2025-77", "reference_type": "", "scores": [ { "value": "6.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2025-09-17T17:10:59Z/" } ], "url": "https://www.mozilla.org/security/advisories/mfsa2025-77/" }, { "reference_url": "https://www.mozilla.org/en-US/security/advisories/mfsa2025-78", "reference_id": "mfsa2025-78", "reference_type": "", "scores": [ { "value": "high", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://www.mozilla.org/en-US/security/advisories/mfsa2025-78" }, { "reference_url": "https://www.mozilla.org/security/advisories/mfsa2025-78/", "reference_id": "mfsa2025-78", "reference_type": "", "scores": [ { "value": "6.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2025-09-17T17:10:59Z/" } ], "url": "https://www.mozilla.org/security/advisories/mfsa2025-78/" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2025:16108", "reference_id": "RHSA-2025:16108", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2025:16108" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2025:16109", "reference_id": "RHSA-2025:16109", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2025:16109" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2025:16156", "reference_id": "RHSA-2025:16156", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2025:16156" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2025:16157", "reference_id": "RHSA-2025:16157", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2025:16157" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2025:16260", "reference_id": "RHSA-2025:16260", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2025:16260" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2025:16589", "reference_id": "RHSA-2025:16589", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2025:16589" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2025:17340", "reference_id": "RHSA-2025:17340", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2025:17340" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2025:17341", "reference_id": "RHSA-2025:17341", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2025:17341" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2025:17342", "reference_id": "RHSA-2025:17342", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2025:17342" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2025:17343", "reference_id": "RHSA-2025:17343", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2025:17343" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2025:17344", "reference_id": "RHSA-2025:17344", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2025:17344" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2025:17345", "reference_id": "RHSA-2025:17345", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2025:17345" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2025:17346", "reference_id": "RHSA-2025:17346", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2025:17346" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2025:17367", "reference_id": "RHSA-2025:17367", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2025:17367" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2025:17368", "reference_id": "RHSA-2025:17368", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2025:17368" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2025:17371", "reference_id": "RHSA-2025:17371", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2025:17371" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2025:17372", "reference_id": "RHSA-2025:17372", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2025:17372" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2025:17373", "reference_id": "RHSA-2025:17373", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2025:17373" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2025:17374", "reference_id": "RHSA-2025:17374", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2025:17374" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2025:17378", "reference_id": "RHSA-2025:17378", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2025:17378" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2025:17453", "reference_id": "RHSA-2025:17453", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2025:17453" }, { "reference_url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1979502", "reference_id": "show_bug.cgi?id=1979502", "reference_type": "", "scores": [ { "value": "6.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2025-09-17T17:10:59Z/" } ], "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1979502" }, { "reference_url": "https://usn.ubuntu.com/7991-1/", "reference_id": "USN-7991-1", "reference_type": "", "scores": [], "url": "https://usn.ubuntu.com/7991-1/" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/940802?format=api", "purl": "pkg:deb/debian/thunderbird@1:115.12.0-1~deb11u1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/thunderbird@1:115.12.0-1~deb11u1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/940993?format=api", "purl": "pkg:deb/debian/thunderbird@1:140.3.0esr-1~deb11u1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/thunderbird@1:140.3.0esr-1~deb11u1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/940992?format=api", "purl": "pkg:deb/debian/thunderbird@1:140.3.0esr-1~deb12u1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/thunderbird@1:140.3.0esr-1~deb12u1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/940995?format=api", "purl": "pkg:deb/debian/thunderbird@1:140.3.0esr-1~deb13u1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/thunderbird@1:140.3.0esr-1~deb13u1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/940994?format=api", "purl": "pkg:deb/debian/thunderbird@1:140.3.0esr-1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/thunderbird@1:140.3.0esr-1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/940800?format=api", "purl": "pkg:deb/debian/thunderbird@1:140.6.0esr-1~deb12u1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/thunderbird@1:140.6.0esr-1~deb12u1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/940804?format=api", "purl": "pkg:deb/debian/thunderbird@1:140.8.0esr-1~deb13u1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/thunderbird@1:140.8.0esr-1~deb13u1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/940803?format=api", "purl": "pkg:deb/debian/thunderbird@1:140.9.0esr-1?distro=trixie", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-5dw5-vpt8-zqbz" }, { "vulnerability": "VCID-9ag7-z86d-nba9" }, { "vulnerability": "VCID-qbzp-euvv-q7c7" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/thunderbird@1:140.9.0esr-1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/1067638?format=api", "purl": "pkg:deb/debian/thunderbird@1:140.9.1esr-1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/thunderbird@1:140.9.1esr-1%3Fdistro=trixie" } ], "aliases": [ "CVE-2025-10532" ], "risk_score": 4.0, "exploitability": "0.5", "weighted_severity": "8.0", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-ruc1-kmaz-fkbb" } ], "risk_score": null, "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/thunderbird@1:140.3.0esr-1%3Fdistro=trixie" }