Lookup for vulnerable packages by Package URL.

Purlpkg:deb/debian/thunderbird@1:128.14.0esr-1~deb11u1?distro=trixie
Typedeb
Namespacedebian
Namethunderbird
Version1:128.14.0esr-1~deb11u1
Qualifiers
distro trixie
Subpath
Is_vulnerablefalse
Next_non_vulnerable_version1:128.14.0esr-1~deb12u1
Latest_non_vulnerable_version1:140.9.1esr-1
Affected_by_vulnerabilities
Fixing_vulnerabilities
0
url VCID-9rm3-u7dy-zuhu
vulnerability_id VCID-9rm3-u7dy-zuhu
summary Same-origin policy bypass in the Graphics: Canvas2D component.
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2025-9180.json
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2025-9180.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2025-9180
reference_id
reference_type
scores
0
value 0.00031
scoring_system epss
scoring_elements 0.08978
published_at 2026-04-21T12:55:00Z
1
value 0.00031
scoring_system epss
scoring_elements 0.08829
published_at 2026-04-18T12:55:00Z
2
value 0.00031
scoring_system epss
scoring_elements 0.08854
published_at 2026-04-16T12:55:00Z
3
value 0.00031
scoring_system epss
scoring_elements 0.08963
published_at 2026-04-13T12:55:00Z
4
value 0.00031
scoring_system epss
scoring_elements 0.08975
published_at 2026-04-12T12:55:00Z
5
value 0.00031
scoring_system epss
scoring_elements 0.09012
published_at 2026-04-11T12:55:00Z
6
value 0.00031
scoring_system epss
scoring_elements 0.08903
published_at 2026-04-07T12:55:00Z
7
value 0.00031
scoring_system epss
scoring_elements 0.09013
published_at 2026-04-09T12:55:00Z
8
value 0.00031
scoring_system epss
scoring_elements 0.08981
published_at 2026-04-08T12:55:00Z
9
value 0.00031
scoring_system epss
scoring_elements 0.08973
published_at 2026-04-04T12:55:00Z
10
value 0.00031
scoring_system epss
scoring_elements 0.08922
published_at 2026-04-02T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2025-9180
2
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-9180
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-9180
3
reference_url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
reference_id
reference_type
scores
0
value 8.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N
url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
4
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=2389581
reference_id 2389581
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=2389581
5
reference_url https://www.mozilla.org/en-US/security/advisories/mfsa2025-64
reference_id mfsa2025-64
reference_type
scores
0
value high
scoring_system generic_textual
scoring_elements
url https://www.mozilla.org/en-US/security/advisories/mfsa2025-64
6
reference_url https://www.mozilla.org/security/advisories/mfsa2025-64/
reference_id mfsa2025-64
reference_type
scores
0
value 8.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2025-08-20T14:05:47Z/
url https://www.mozilla.org/security/advisories/mfsa2025-64/
7
reference_url https://www.mozilla.org/en-US/security/advisories/mfsa2025-65
reference_id mfsa2025-65
reference_type
scores
0
value high
scoring_system generic_textual
scoring_elements
url https://www.mozilla.org/en-US/security/advisories/mfsa2025-65
8
reference_url https://www.mozilla.org/security/advisories/mfsa2025-65/
reference_id mfsa2025-65
reference_type
scores
0
value 8.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2025-08-20T14:05:47Z/
url https://www.mozilla.org/security/advisories/mfsa2025-65/
9
reference_url https://www.mozilla.org/en-US/security/advisories/mfsa2025-66
reference_id mfsa2025-66
reference_type
scores
0
value high
scoring_system generic_textual
scoring_elements
url https://www.mozilla.org/en-US/security/advisories/mfsa2025-66
10
reference_url https://www.mozilla.org/security/advisories/mfsa2025-66/
reference_id mfsa2025-66
reference_type
scores
0
value 8.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2025-08-20T14:05:47Z/
url https://www.mozilla.org/security/advisories/mfsa2025-66/
11
reference_url https://www.mozilla.org/en-US/security/advisories/mfsa2025-67
reference_id mfsa2025-67
reference_type
scores
0
value high
scoring_system generic_textual
scoring_elements
url https://www.mozilla.org/en-US/security/advisories/mfsa2025-67
12
reference_url https://www.mozilla.org/security/advisories/mfsa2025-67/
reference_id mfsa2025-67
reference_type
scores
0
value 8.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2025-08-20T14:05:47Z/
url https://www.mozilla.org/security/advisories/mfsa2025-67/
13
reference_url https://www.mozilla.org/en-US/security/advisories/mfsa2025-70
reference_id mfsa2025-70
reference_type
scores
0
value high
scoring_system generic_textual
scoring_elements
url https://www.mozilla.org/en-US/security/advisories/mfsa2025-70
14
reference_url https://www.mozilla.org/security/advisories/mfsa2025-70/
reference_id mfsa2025-70
reference_type
scores
0
value 8.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2025-08-20T14:05:47Z/
url https://www.mozilla.org/security/advisories/mfsa2025-70/
15
reference_url https://www.mozilla.org/en-US/security/advisories/mfsa2025-71
reference_id mfsa2025-71
reference_type
scores
0
value high
scoring_system generic_textual
scoring_elements
url https://www.mozilla.org/en-US/security/advisories/mfsa2025-71
16
reference_url https://www.mozilla.org/security/advisories/mfsa2025-71/
reference_id mfsa2025-71
reference_type
scores
0
value 8.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2025-08-20T14:05:47Z/
url https://www.mozilla.org/security/advisories/mfsa2025-71/
17
reference_url https://www.mozilla.org/en-US/security/advisories/mfsa2025-72
reference_id mfsa2025-72
reference_type
scores
0
value high
scoring_system generic_textual
scoring_elements
url https://www.mozilla.org/en-US/security/advisories/mfsa2025-72
18
reference_url https://www.mozilla.org/security/advisories/mfsa2025-72/
reference_id mfsa2025-72
reference_type
scores
0
value 8.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2025-08-20T14:05:47Z/
url https://www.mozilla.org/security/advisories/mfsa2025-72/
19
reference_url https://access.redhat.com/errata/RHSA-2025:14416
reference_id RHSA-2025:14416
reference_type
scores
url https://access.redhat.com/errata/RHSA-2025:14416
20
reference_url https://access.redhat.com/errata/RHSA-2025:14417
reference_id RHSA-2025:14417
reference_type
scores
url https://access.redhat.com/errata/RHSA-2025:14417
21
reference_url https://access.redhat.com/errata/RHSA-2025:14442
reference_id RHSA-2025:14442
reference_type
scores
url https://access.redhat.com/errata/RHSA-2025:14442
22
reference_url https://access.redhat.com/errata/RHSA-2025:14640
reference_id RHSA-2025:14640
reference_type
scores
url https://access.redhat.com/errata/RHSA-2025:14640
23
reference_url https://access.redhat.com/errata/RHSA-2025:14743
reference_id RHSA-2025:14743
reference_type
scores
url https://access.redhat.com/errata/RHSA-2025:14743
24
reference_url https://access.redhat.com/errata/RHSA-2025:14844
reference_id RHSA-2025:14844
reference_type
scores
url https://access.redhat.com/errata/RHSA-2025:14844
25
reference_url https://access.redhat.com/errata/RHSA-2025:15418
reference_id RHSA-2025:15418
reference_type
scores
url https://access.redhat.com/errata/RHSA-2025:15418
26
reference_url https://access.redhat.com/errata/RHSA-2025:15419
reference_id RHSA-2025:15419
reference_type
scores
url https://access.redhat.com/errata/RHSA-2025:15419
27
reference_url https://access.redhat.com/errata/RHSA-2025:15420
reference_id RHSA-2025:15420
reference_type
scores
url https://access.redhat.com/errata/RHSA-2025:15420
28
reference_url https://access.redhat.com/errata/RHSA-2025:15421
reference_id RHSA-2025:15421
reference_type
scores
url https://access.redhat.com/errata/RHSA-2025:15421
29
reference_url https://access.redhat.com/errata/RHSA-2025:15422
reference_id RHSA-2025:15422
reference_type
scores
url https://access.redhat.com/errata/RHSA-2025:15422
30
reference_url https://access.redhat.com/errata/RHSA-2025:15423
reference_id RHSA-2025:15423
reference_type
scores
url https://access.redhat.com/errata/RHSA-2025:15423
31
reference_url https://access.redhat.com/errata/RHSA-2025:15424
reference_id RHSA-2025:15424
reference_type
scores
url https://access.redhat.com/errata/RHSA-2025:15424
32
reference_url https://access.redhat.com/errata/RHSA-2025:15430
reference_id RHSA-2025:15430
reference_type
scores
url https://access.redhat.com/errata/RHSA-2025:15430
33
reference_url https://access.redhat.com/errata/RHSA-2025:15434
reference_id RHSA-2025:15434
reference_type
scores
url https://access.redhat.com/errata/RHSA-2025:15434
34
reference_url https://access.redhat.com/errata/RHSA-2025:15435
reference_id RHSA-2025:15435
reference_type
scores
url https://access.redhat.com/errata/RHSA-2025:15435
35
reference_url https://access.redhat.com/errata/RHSA-2025:15436
reference_id RHSA-2025:15436
reference_type
scores
url https://access.redhat.com/errata/RHSA-2025:15436
36
reference_url https://access.redhat.com/errata/RHSA-2025:15437
reference_id RHSA-2025:15437
reference_type
scores
url https://access.redhat.com/errata/RHSA-2025:15437
37
reference_url https://access.redhat.com/errata/RHSA-2025:15438
reference_id RHSA-2025:15438
reference_type
scores
url https://access.redhat.com/errata/RHSA-2025:15438
38
reference_url https://access.redhat.com/errata/RHSA-2025:15496
reference_id RHSA-2025:15496
reference_type
scores
url https://access.redhat.com/errata/RHSA-2025:15496
39
reference_url https://access.redhat.com/errata/RHSA-2025:15535
reference_id RHSA-2025:15535
reference_type
scores
url https://access.redhat.com/errata/RHSA-2025:15535
40
reference_url https://bugzilla.mozilla.org/show_bug.cgi?id=1979782
reference_id show_bug.cgi?id=1979782
reference_type
scores
0
value 8.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2025-08-20T14:05:47Z/
url https://bugzilla.mozilla.org/show_bug.cgi?id=1979782
41
reference_url https://usn.ubuntu.com/7991-1/
reference_id USN-7991-1
reference_type
scores
url https://usn.ubuntu.com/7991-1/
fixed_packages
0
url pkg:deb/debian/thunderbird@1:115.12.0-1~deb11u1?distro=trixie
purl pkg:deb/debian/thunderbird@1:115.12.0-1~deb11u1?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/thunderbird@1:115.12.0-1~deb11u1%3Fdistro=trixie
1
url pkg:deb/debian/thunderbird@1:128.14.0esr-1~deb11u1?distro=trixie
purl pkg:deb/debian/thunderbird@1:128.14.0esr-1~deb11u1?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/thunderbird@1:128.14.0esr-1~deb11u1%3Fdistro=trixie
2
url pkg:deb/debian/thunderbird@1:128.14.0esr-1~deb12u1?distro=trixie
purl pkg:deb/debian/thunderbird@1:128.14.0esr-1~deb12u1?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/thunderbird@1:128.14.0esr-1~deb12u1%3Fdistro=trixie
3
url pkg:deb/debian/thunderbird@1:128.14.0esr-1~deb13u1?distro=trixie
purl pkg:deb/debian/thunderbird@1:128.14.0esr-1~deb13u1?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/thunderbird@1:128.14.0esr-1~deb13u1%3Fdistro=trixie
4
url pkg:deb/debian/thunderbird@1:128.14.0esr-1?distro=trixie
purl pkg:deb/debian/thunderbird@1:128.14.0esr-1?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/thunderbird@1:128.14.0esr-1%3Fdistro=trixie
5
url pkg:deb/debian/thunderbird@1:140.6.0esr-1~deb12u1?distro=trixie
purl pkg:deb/debian/thunderbird@1:140.6.0esr-1~deb12u1?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/thunderbird@1:140.6.0esr-1~deb12u1%3Fdistro=trixie
6
url pkg:deb/debian/thunderbird@1:140.8.0esr-1~deb13u1?distro=trixie
purl pkg:deb/debian/thunderbird@1:140.8.0esr-1~deb13u1?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/thunderbird@1:140.8.0esr-1~deb13u1%3Fdistro=trixie
7
url pkg:deb/debian/thunderbird@1:140.9.0esr-1?distro=trixie
purl pkg:deb/debian/thunderbird@1:140.9.0esr-1?distro=trixie
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-5dw5-vpt8-zqbz
1
vulnerability VCID-9ag7-z86d-nba9
2
vulnerability VCID-qbzp-euvv-q7c7
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/thunderbird@1:140.9.0esr-1%3Fdistro=trixie
8
url pkg:deb/debian/thunderbird@1:140.9.1esr-1?distro=trixie
purl pkg:deb/debian/thunderbird@1:140.9.1esr-1?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/thunderbird@1:140.9.1esr-1%3Fdistro=trixie
aliases CVE-2025-9180
risk_score 4.0
exploitability 0.5
weighted_severity 8.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-9rm3-u7dy-zuhu
1
url VCID-f2tn-1hq4-uffa
vulnerability_id VCID-f2tn-1hq4-uffa
summary An attacker was able to perform memory corruption in the GMP process which processes encrypted media. This process is also heavily sandboxed, but represents slightly different privileges from the content process.
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2025-9179.json
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2025-9179.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2025-9179
reference_id
reference_type
scores
0
value 0.00117
scoring_system epss
scoring_elements 0.30567
published_at 2026-04-21T12:55:00Z
1
value 0.00117
scoring_system epss
scoring_elements 0.30601
published_at 2026-04-18T12:55:00Z
2
value 0.00117
scoring_system epss
scoring_elements 0.30619
published_at 2026-04-16T12:55:00Z
3
value 0.00117
scoring_system epss
scoring_elements 0.30593
published_at 2026-04-13T12:55:00Z
4
value 0.00117
scoring_system epss
scoring_elements 0.30638
published_at 2026-04-12T12:55:00Z
5
value 0.00117
scoring_system epss
scoring_elements 0.30683
published_at 2026-04-11T12:55:00Z
6
value 0.00117
scoring_system epss
scoring_elements 0.30587
published_at 2026-04-07T12:55:00Z
7
value 0.00117
scoring_system epss
scoring_elements 0.30679
published_at 2026-04-09T12:55:00Z
8
value 0.00117
scoring_system epss
scoring_elements 0.30646
published_at 2026-04-08T12:55:00Z
9
value 0.00117
scoring_system epss
scoring_elements 0.30772
published_at 2026-04-04T12:55:00Z
10
value 0.00117
scoring_system epss
scoring_elements 0.30724
published_at 2026-04-02T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2025-9179
2
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-9179
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-9179
3
reference_url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
4
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=2389580
reference_id 2389580
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=2389580
5
reference_url https://www.mozilla.org/en-US/security/advisories/mfsa2025-64
reference_id mfsa2025-64
reference_type
scores
0
value high
scoring_system generic_textual
scoring_elements
url https://www.mozilla.org/en-US/security/advisories/mfsa2025-64
6
reference_url https://www.mozilla.org/security/advisories/mfsa2025-64/
reference_id mfsa2025-64
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:Y/T:T/P:M/B:A/M:M/D:T/2025-08-20T14:06:11Z/
url https://www.mozilla.org/security/advisories/mfsa2025-64/
7
reference_url https://www.mozilla.org/en-US/security/advisories/mfsa2025-65
reference_id mfsa2025-65
reference_type
scores
0
value high
scoring_system generic_textual
scoring_elements
url https://www.mozilla.org/en-US/security/advisories/mfsa2025-65
8
reference_url https://www.mozilla.org/security/advisories/mfsa2025-65/
reference_id mfsa2025-65
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:Y/T:T/P:M/B:A/M:M/D:T/2025-08-20T14:06:11Z/
url https://www.mozilla.org/security/advisories/mfsa2025-65/
9
reference_url https://www.mozilla.org/en-US/security/advisories/mfsa2025-66
reference_id mfsa2025-66
reference_type
scores
0
value high
scoring_system generic_textual
scoring_elements
url https://www.mozilla.org/en-US/security/advisories/mfsa2025-66
10
reference_url https://www.mozilla.org/security/advisories/mfsa2025-66/
reference_id mfsa2025-66
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:Y/T:T/P:M/B:A/M:M/D:T/2025-08-20T14:06:11Z/
url https://www.mozilla.org/security/advisories/mfsa2025-66/
11
reference_url https://www.mozilla.org/en-US/security/advisories/mfsa2025-67
reference_id mfsa2025-67
reference_type
scores
0
value high
scoring_system generic_textual
scoring_elements
url https://www.mozilla.org/en-US/security/advisories/mfsa2025-67
12
reference_url https://www.mozilla.org/security/advisories/mfsa2025-67/
reference_id mfsa2025-67
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:Y/T:T/P:M/B:A/M:M/D:T/2025-08-20T14:06:11Z/
url https://www.mozilla.org/security/advisories/mfsa2025-67/
13
reference_url https://www.mozilla.org/en-US/security/advisories/mfsa2025-70
reference_id mfsa2025-70
reference_type
scores
0
value high
scoring_system generic_textual
scoring_elements
url https://www.mozilla.org/en-US/security/advisories/mfsa2025-70
14
reference_url https://www.mozilla.org/security/advisories/mfsa2025-70/
reference_id mfsa2025-70
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:Y/T:T/P:M/B:A/M:M/D:T/2025-08-20T14:06:11Z/
url https://www.mozilla.org/security/advisories/mfsa2025-70/
15
reference_url https://www.mozilla.org/en-US/security/advisories/mfsa2025-71
reference_id mfsa2025-71
reference_type
scores
0
value high
scoring_system generic_textual
scoring_elements
url https://www.mozilla.org/en-US/security/advisories/mfsa2025-71
16
reference_url https://www.mozilla.org/security/advisories/mfsa2025-71/
reference_id mfsa2025-71
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:Y/T:T/P:M/B:A/M:M/D:T/2025-08-20T14:06:11Z/
url https://www.mozilla.org/security/advisories/mfsa2025-71/
17
reference_url https://www.mozilla.org/en-US/security/advisories/mfsa2025-72
reference_id mfsa2025-72
reference_type
scores
0
value high
scoring_system generic_textual
scoring_elements
url https://www.mozilla.org/en-US/security/advisories/mfsa2025-72
18
reference_url https://www.mozilla.org/security/advisories/mfsa2025-72/
reference_id mfsa2025-72
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:Y/T:T/P:M/B:A/M:M/D:T/2025-08-20T14:06:11Z/
url https://www.mozilla.org/security/advisories/mfsa2025-72/
19
reference_url https://access.redhat.com/errata/RHSA-2025:14416
reference_id RHSA-2025:14416
reference_type
scores
url https://access.redhat.com/errata/RHSA-2025:14416
20
reference_url https://access.redhat.com/errata/RHSA-2025:14417
reference_id RHSA-2025:14417
reference_type
scores
url https://access.redhat.com/errata/RHSA-2025:14417
21
reference_url https://access.redhat.com/errata/RHSA-2025:14442
reference_id RHSA-2025:14442
reference_type
scores
url https://access.redhat.com/errata/RHSA-2025:14442
22
reference_url https://access.redhat.com/errata/RHSA-2025:14640
reference_id RHSA-2025:14640
reference_type
scores
url https://access.redhat.com/errata/RHSA-2025:14640
23
reference_url https://access.redhat.com/errata/RHSA-2025:14743
reference_id RHSA-2025:14743
reference_type
scores
url https://access.redhat.com/errata/RHSA-2025:14743
24
reference_url https://access.redhat.com/errata/RHSA-2025:14844
reference_id RHSA-2025:14844
reference_type
scores
url https://access.redhat.com/errata/RHSA-2025:14844
25
reference_url https://access.redhat.com/errata/RHSA-2025:15418
reference_id RHSA-2025:15418
reference_type
scores
url https://access.redhat.com/errata/RHSA-2025:15418
26
reference_url https://access.redhat.com/errata/RHSA-2025:15419
reference_id RHSA-2025:15419
reference_type
scores
url https://access.redhat.com/errata/RHSA-2025:15419
27
reference_url https://access.redhat.com/errata/RHSA-2025:15420
reference_id RHSA-2025:15420
reference_type
scores
url https://access.redhat.com/errata/RHSA-2025:15420
28
reference_url https://access.redhat.com/errata/RHSA-2025:15421
reference_id RHSA-2025:15421
reference_type
scores
url https://access.redhat.com/errata/RHSA-2025:15421
29
reference_url https://access.redhat.com/errata/RHSA-2025:15422
reference_id RHSA-2025:15422
reference_type
scores
url https://access.redhat.com/errata/RHSA-2025:15422
30
reference_url https://access.redhat.com/errata/RHSA-2025:15423
reference_id RHSA-2025:15423
reference_type
scores
url https://access.redhat.com/errata/RHSA-2025:15423
31
reference_url https://access.redhat.com/errata/RHSA-2025:15424
reference_id RHSA-2025:15424
reference_type
scores
url https://access.redhat.com/errata/RHSA-2025:15424
32
reference_url https://access.redhat.com/errata/RHSA-2025:15430
reference_id RHSA-2025:15430
reference_type
scores
url https://access.redhat.com/errata/RHSA-2025:15430
33
reference_url https://access.redhat.com/errata/RHSA-2025:15434
reference_id RHSA-2025:15434
reference_type
scores
url https://access.redhat.com/errata/RHSA-2025:15434
34
reference_url https://access.redhat.com/errata/RHSA-2025:15435
reference_id RHSA-2025:15435
reference_type
scores
url https://access.redhat.com/errata/RHSA-2025:15435
35
reference_url https://access.redhat.com/errata/RHSA-2025:15436
reference_id RHSA-2025:15436
reference_type
scores
url https://access.redhat.com/errata/RHSA-2025:15436
36
reference_url https://access.redhat.com/errata/RHSA-2025:15437
reference_id RHSA-2025:15437
reference_type
scores
url https://access.redhat.com/errata/RHSA-2025:15437
37
reference_url https://access.redhat.com/errata/RHSA-2025:15438
reference_id RHSA-2025:15438
reference_type
scores
url https://access.redhat.com/errata/RHSA-2025:15438
38
reference_url https://access.redhat.com/errata/RHSA-2025:15496
reference_id RHSA-2025:15496
reference_type
scores
url https://access.redhat.com/errata/RHSA-2025:15496
39
reference_url https://access.redhat.com/errata/RHSA-2025:15535
reference_id RHSA-2025:15535
reference_type
scores
url https://access.redhat.com/errata/RHSA-2025:15535
40
reference_url https://bugzilla.mozilla.org/show_bug.cgi?id=1979527
reference_id show_bug.cgi?id=1979527
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:Y/T:T/P:M/B:A/M:M/D:T/2025-08-20T14:06:11Z/
url https://bugzilla.mozilla.org/show_bug.cgi?id=1979527
41
reference_url https://usn.ubuntu.com/7991-1/
reference_id USN-7991-1
reference_type
scores
url https://usn.ubuntu.com/7991-1/
fixed_packages
0
url pkg:deb/debian/thunderbird@1:115.12.0-1~deb11u1?distro=trixie
purl pkg:deb/debian/thunderbird@1:115.12.0-1~deb11u1?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/thunderbird@1:115.12.0-1~deb11u1%3Fdistro=trixie
1
url pkg:deb/debian/thunderbird@1:128.14.0esr-1~deb11u1?distro=trixie
purl pkg:deb/debian/thunderbird@1:128.14.0esr-1~deb11u1?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/thunderbird@1:128.14.0esr-1~deb11u1%3Fdistro=trixie
2
url pkg:deb/debian/thunderbird@1:128.14.0esr-1~deb12u1?distro=trixie
purl pkg:deb/debian/thunderbird@1:128.14.0esr-1~deb12u1?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/thunderbird@1:128.14.0esr-1~deb12u1%3Fdistro=trixie
3
url pkg:deb/debian/thunderbird@1:128.14.0esr-1~deb13u1?distro=trixie
purl pkg:deb/debian/thunderbird@1:128.14.0esr-1~deb13u1?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/thunderbird@1:128.14.0esr-1~deb13u1%3Fdistro=trixie
4
url pkg:deb/debian/thunderbird@1:128.14.0esr-1?distro=trixie
purl pkg:deb/debian/thunderbird@1:128.14.0esr-1?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/thunderbird@1:128.14.0esr-1%3Fdistro=trixie
5
url pkg:deb/debian/thunderbird@1:140.6.0esr-1~deb12u1?distro=trixie
purl pkg:deb/debian/thunderbird@1:140.6.0esr-1~deb12u1?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/thunderbird@1:140.6.0esr-1~deb12u1%3Fdistro=trixie
6
url pkg:deb/debian/thunderbird@1:140.8.0esr-1~deb13u1?distro=trixie
purl pkg:deb/debian/thunderbird@1:140.8.0esr-1~deb13u1?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/thunderbird@1:140.8.0esr-1~deb13u1%3Fdistro=trixie
7
url pkg:deb/debian/thunderbird@1:140.9.0esr-1?distro=trixie
purl pkg:deb/debian/thunderbird@1:140.9.0esr-1?distro=trixie
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-5dw5-vpt8-zqbz
1
vulnerability VCID-9ag7-z86d-nba9
2
vulnerability VCID-qbzp-euvv-q7c7
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/thunderbird@1:140.9.0esr-1%3Fdistro=trixie
8
url pkg:deb/debian/thunderbird@1:140.9.1esr-1?distro=trixie
purl pkg:deb/debian/thunderbird@1:140.9.1esr-1?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/thunderbird@1:140.9.1esr-1%3Fdistro=trixie
aliases CVE-2025-9179
risk_score 4.4
exploitability 0.5
weighted_severity 8.8
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-f2tn-1hq4-uffa
2
url VCID-hfp7-jaxc-2khq
vulnerability_id VCID-hfp7-jaxc-2khq
summary Uninitialized memory in the JavaScript Engine component.
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2025-9181.json
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2025-9181.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2025-9181
reference_id
reference_type
scores
0
value 0.00062
scoring_system epss
scoring_elements 0.19256
published_at 2026-04-21T12:55:00Z
1
value 0.00062
scoring_system epss
scoring_elements 0.19237
published_at 2026-04-16T12:55:00Z
2
value 0.00062
scoring_system epss
scoring_elements 0.19276
published_at 2026-04-13T12:55:00Z
3
value 0.00062
scoring_system epss
scoring_elements 0.19332
published_at 2026-04-12T12:55:00Z
4
value 0.00062
scoring_system epss
scoring_elements 0.1938
published_at 2026-04-11T12:55:00Z
5
value 0.00062
scoring_system epss
scoring_elements 0.19528
published_at 2026-04-04T12:55:00Z
6
value 0.00062
scoring_system epss
scoring_elements 0.19376
published_at 2026-04-09T12:55:00Z
7
value 0.00062
scoring_system epss
scoring_elements 0.19324
published_at 2026-04-08T12:55:00Z
8
value 0.00062
scoring_system epss
scoring_elements 0.19246
published_at 2026-04-18T12:55:00Z
9
value 0.00062
scoring_system epss
scoring_elements 0.19481
published_at 2026-04-02T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2025-9181
2
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-9181
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-9181
3
reference_url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
reference_id
reference_type
scores
0
value 5.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L
url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
4
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=2389583
reference_id 2389583
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=2389583
5
reference_url https://www.mozilla.org/en-US/security/advisories/mfsa2025-64
reference_id mfsa2025-64
reference_type
scores
0
value high
scoring_system generic_textual
scoring_elements
url https://www.mozilla.org/en-US/security/advisories/mfsa2025-64
6
reference_url https://www.mozilla.org/security/advisories/mfsa2025-64/
reference_id mfsa2025-64
reference_type
scores
0
value 6.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2025-08-20T14:05:26Z/
url https://www.mozilla.org/security/advisories/mfsa2025-64/
7
reference_url https://www.mozilla.org/en-US/security/advisories/mfsa2025-66
reference_id mfsa2025-66
reference_type
scores
0
value high
scoring_system generic_textual
scoring_elements
url https://www.mozilla.org/en-US/security/advisories/mfsa2025-66
8
reference_url https://www.mozilla.org/security/advisories/mfsa2025-66/
reference_id mfsa2025-66
reference_type
scores
0
value 6.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2025-08-20T14:05:26Z/
url https://www.mozilla.org/security/advisories/mfsa2025-66/
9
reference_url https://www.mozilla.org/en-US/security/advisories/mfsa2025-67
reference_id mfsa2025-67
reference_type
scores
0
value high
scoring_system generic_textual
scoring_elements
url https://www.mozilla.org/en-US/security/advisories/mfsa2025-67
10
reference_url https://www.mozilla.org/security/advisories/mfsa2025-67/
reference_id mfsa2025-67
reference_type
scores
0
value 6.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2025-08-20T14:05:26Z/
url https://www.mozilla.org/security/advisories/mfsa2025-67/
11
reference_url https://www.mozilla.org/en-US/security/advisories/mfsa2025-70
reference_id mfsa2025-70
reference_type
scores
0
value high
scoring_system generic_textual
scoring_elements
url https://www.mozilla.org/en-US/security/advisories/mfsa2025-70
12
reference_url https://www.mozilla.org/security/advisories/mfsa2025-70/
reference_id mfsa2025-70
reference_type
scores
0
value 6.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2025-08-20T14:05:26Z/
url https://www.mozilla.org/security/advisories/mfsa2025-70/
13
reference_url https://www.mozilla.org/en-US/security/advisories/mfsa2025-71
reference_id mfsa2025-71
reference_type
scores
0
value high
scoring_system generic_textual
scoring_elements
url https://www.mozilla.org/en-US/security/advisories/mfsa2025-71
14
reference_url https://www.mozilla.org/security/advisories/mfsa2025-71/
reference_id mfsa2025-71
reference_type
scores
0
value 6.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2025-08-20T14:05:26Z/
url https://www.mozilla.org/security/advisories/mfsa2025-71/
15
reference_url https://www.mozilla.org/en-US/security/advisories/mfsa2025-72
reference_id mfsa2025-72
reference_type
scores
0
value high
scoring_system generic_textual
scoring_elements
url https://www.mozilla.org/en-US/security/advisories/mfsa2025-72
16
reference_url https://www.mozilla.org/security/advisories/mfsa2025-72/
reference_id mfsa2025-72
reference_type
scores
0
value 6.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2025-08-20T14:05:26Z/
url https://www.mozilla.org/security/advisories/mfsa2025-72/
17
reference_url https://access.redhat.com/errata/RHSA-2025:14416
reference_id RHSA-2025:14416
reference_type
scores
url https://access.redhat.com/errata/RHSA-2025:14416
18
reference_url https://access.redhat.com/errata/RHSA-2025:14417
reference_id RHSA-2025:14417
reference_type
scores
url https://access.redhat.com/errata/RHSA-2025:14417
19
reference_url https://access.redhat.com/errata/RHSA-2025:14442
reference_id RHSA-2025:14442
reference_type
scores
url https://access.redhat.com/errata/RHSA-2025:14442
20
reference_url https://access.redhat.com/errata/RHSA-2025:14640
reference_id RHSA-2025:14640
reference_type
scores
url https://access.redhat.com/errata/RHSA-2025:14640
21
reference_url https://access.redhat.com/errata/RHSA-2025:14743
reference_id RHSA-2025:14743
reference_type
scores
url https://access.redhat.com/errata/RHSA-2025:14743
22
reference_url https://access.redhat.com/errata/RHSA-2025:14844
reference_id RHSA-2025:14844
reference_type
scores
url https://access.redhat.com/errata/RHSA-2025:14844
23
reference_url https://access.redhat.com/errata/RHSA-2025:15418
reference_id RHSA-2025:15418
reference_type
scores
url https://access.redhat.com/errata/RHSA-2025:15418
24
reference_url https://access.redhat.com/errata/RHSA-2025:15419
reference_id RHSA-2025:15419
reference_type
scores
url https://access.redhat.com/errata/RHSA-2025:15419
25
reference_url https://access.redhat.com/errata/RHSA-2025:15420
reference_id RHSA-2025:15420
reference_type
scores
url https://access.redhat.com/errata/RHSA-2025:15420
26
reference_url https://access.redhat.com/errata/RHSA-2025:15421
reference_id RHSA-2025:15421
reference_type
scores
url https://access.redhat.com/errata/RHSA-2025:15421
27
reference_url https://access.redhat.com/errata/RHSA-2025:15422
reference_id RHSA-2025:15422
reference_type
scores
url https://access.redhat.com/errata/RHSA-2025:15422
28
reference_url https://access.redhat.com/errata/RHSA-2025:15423
reference_id RHSA-2025:15423
reference_type
scores
url https://access.redhat.com/errata/RHSA-2025:15423
29
reference_url https://access.redhat.com/errata/RHSA-2025:15424
reference_id RHSA-2025:15424
reference_type
scores
url https://access.redhat.com/errata/RHSA-2025:15424
30
reference_url https://access.redhat.com/errata/RHSA-2025:15430
reference_id RHSA-2025:15430
reference_type
scores
url https://access.redhat.com/errata/RHSA-2025:15430
31
reference_url https://access.redhat.com/errata/RHSA-2025:15434
reference_id RHSA-2025:15434
reference_type
scores
url https://access.redhat.com/errata/RHSA-2025:15434
32
reference_url https://access.redhat.com/errata/RHSA-2025:15435
reference_id RHSA-2025:15435
reference_type
scores
url https://access.redhat.com/errata/RHSA-2025:15435
33
reference_url https://access.redhat.com/errata/RHSA-2025:15436
reference_id RHSA-2025:15436
reference_type
scores
url https://access.redhat.com/errata/RHSA-2025:15436
34
reference_url https://access.redhat.com/errata/RHSA-2025:15437
reference_id RHSA-2025:15437
reference_type
scores
url https://access.redhat.com/errata/RHSA-2025:15437
35
reference_url https://access.redhat.com/errata/RHSA-2025:15438
reference_id RHSA-2025:15438
reference_type
scores
url https://access.redhat.com/errata/RHSA-2025:15438
36
reference_url https://access.redhat.com/errata/RHSA-2025:15496
reference_id RHSA-2025:15496
reference_type
scores
url https://access.redhat.com/errata/RHSA-2025:15496
37
reference_url https://access.redhat.com/errata/RHSA-2025:15535
reference_id RHSA-2025:15535
reference_type
scores
url https://access.redhat.com/errata/RHSA-2025:15535
38
reference_url https://bugzilla.mozilla.org/show_bug.cgi?id=1977130
reference_id show_bug.cgi?id=1977130
reference_type
scores
0
value 6.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2025-08-20T14:05:26Z/
url https://bugzilla.mozilla.org/show_bug.cgi?id=1977130
39
reference_url https://usn.ubuntu.com/7991-1/
reference_id USN-7991-1
reference_type
scores
url https://usn.ubuntu.com/7991-1/
fixed_packages
0
url pkg:deb/debian/thunderbird@1:115.12.0-1~deb11u1?distro=trixie
purl pkg:deb/debian/thunderbird@1:115.12.0-1~deb11u1?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/thunderbird@1:115.12.0-1~deb11u1%3Fdistro=trixie
1
url pkg:deb/debian/thunderbird@1:128.14.0esr-1~deb11u1?distro=trixie
purl pkg:deb/debian/thunderbird@1:128.14.0esr-1~deb11u1?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/thunderbird@1:128.14.0esr-1~deb11u1%3Fdistro=trixie
2
url pkg:deb/debian/thunderbird@1:128.14.0esr-1~deb12u1?distro=trixie
purl pkg:deb/debian/thunderbird@1:128.14.0esr-1~deb12u1?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/thunderbird@1:128.14.0esr-1~deb12u1%3Fdistro=trixie
3
url pkg:deb/debian/thunderbird@1:128.14.0esr-1~deb13u1?distro=trixie
purl pkg:deb/debian/thunderbird@1:128.14.0esr-1~deb13u1?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/thunderbird@1:128.14.0esr-1~deb13u1%3Fdistro=trixie
4
url pkg:deb/debian/thunderbird@1:128.14.0esr-1?distro=trixie
purl pkg:deb/debian/thunderbird@1:128.14.0esr-1?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/thunderbird@1:128.14.0esr-1%3Fdistro=trixie
5
url pkg:deb/debian/thunderbird@1:140.6.0esr-1~deb12u1?distro=trixie
purl pkg:deb/debian/thunderbird@1:140.6.0esr-1~deb12u1?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/thunderbird@1:140.6.0esr-1~deb12u1%3Fdistro=trixie
6
url pkg:deb/debian/thunderbird@1:140.8.0esr-1~deb13u1?distro=trixie
purl pkg:deb/debian/thunderbird@1:140.8.0esr-1~deb13u1?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/thunderbird@1:140.8.0esr-1~deb13u1%3Fdistro=trixie
7
url pkg:deb/debian/thunderbird@1:140.9.0esr-1?distro=trixie
purl pkg:deb/debian/thunderbird@1:140.9.0esr-1?distro=trixie
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-5dw5-vpt8-zqbz
1
vulnerability VCID-9ag7-z86d-nba9
2
vulnerability VCID-qbzp-euvv-q7c7
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/thunderbird@1:140.9.0esr-1%3Fdistro=trixie
8
url pkg:deb/debian/thunderbird@1:140.9.1esr-1?distro=trixie
purl pkg:deb/debian/thunderbird@1:140.9.1esr-1?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/thunderbird@1:140.9.1esr-1%3Fdistro=trixie
aliases CVE-2025-9181
risk_score 4.0
exploitability 0.5
weighted_severity 8.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-hfp7-jaxc-2khq
3
url VCID-vz6w-wghm-nqaq
vulnerability_id VCID-vz6w-wghm-nqaq
summary Memory safety bugs present in Firefox ESR 115.26, Firefox ESR 128.13, Thunderbird ESR 128.13, Firefox ESR 140.1, Thunderbird ESR 140.1, Firefox 141 and Thunderbird 141. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code.
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2025-9185.json
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2025-9185.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2025-9185
reference_id
reference_type
scores
0
value 0.00087
scoring_system epss
scoring_elements 0.24945
published_at 2026-04-21T12:55:00Z
1
value 0.00087
scoring_system epss
scoring_elements 0.24972
published_at 2026-04-18T12:55:00Z
2
value 0.00087
scoring_system epss
scoring_elements 0.2498
published_at 2026-04-16T12:55:00Z
3
value 0.00087
scoring_system epss
scoring_elements 0.24967
published_at 2026-04-13T12:55:00Z
4
value 0.00087
scoring_system epss
scoring_elements 0.25021
published_at 2026-04-12T12:55:00Z
5
value 0.00087
scoring_system epss
scoring_elements 0.25061
published_at 2026-04-11T12:55:00Z
6
value 0.00087
scoring_system epss
scoring_elements 0.24934
published_at 2026-04-07T12:55:00Z
7
value 0.00087
scoring_system epss
scoring_elements 0.25047
published_at 2026-04-09T12:55:00Z
8
value 0.00087
scoring_system epss
scoring_elements 0.25002
published_at 2026-04-08T12:55:00Z
9
value 0.00087
scoring_system epss
scoring_elements 0.25161
published_at 2026-04-04T12:55:00Z
10
value 0.00087
scoring_system epss
scoring_elements 0.25121
published_at 2026-04-02T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2025-9185
2
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-9185
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-9185
3
reference_url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
reference_id
reference_type
scores
0
value 8.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
4
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=2389584
reference_id 2389584
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=2389584
5
reference_url https://bugzilla.mozilla.org/buglist.cgi?bug_id=1970154%2C1976782%2C1977166
reference_id buglist.cgi?bug_id=1970154%2C1976782%2C1977166
reference_type
scores
0
value 8.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2025-08-20T03:56:23Z/
url https://bugzilla.mozilla.org/buglist.cgi?bug_id=1970154%2C1976782%2C1977166
6
reference_url https://www.mozilla.org/en-US/security/advisories/mfsa2025-64
reference_id mfsa2025-64
reference_type
scores
0
value high
scoring_system generic_textual
scoring_elements
url https://www.mozilla.org/en-US/security/advisories/mfsa2025-64
7
reference_url https://www.mozilla.org/security/advisories/mfsa2025-64/
reference_id mfsa2025-64
reference_type
scores
0
value 8.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2025-08-20T03:56:23Z/
url https://www.mozilla.org/security/advisories/mfsa2025-64/
8
reference_url https://www.mozilla.org/en-US/security/advisories/mfsa2025-65
reference_id mfsa2025-65
reference_type
scores
0
value high
scoring_system generic_textual
scoring_elements
url https://www.mozilla.org/en-US/security/advisories/mfsa2025-65
9
reference_url https://www.mozilla.org/security/advisories/mfsa2025-65/
reference_id mfsa2025-65
reference_type
scores
0
value 8.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2025-08-20T03:56:23Z/
url https://www.mozilla.org/security/advisories/mfsa2025-65/
10
reference_url https://www.mozilla.org/en-US/security/advisories/mfsa2025-66
reference_id mfsa2025-66
reference_type
scores
0
value high
scoring_system generic_textual
scoring_elements
url https://www.mozilla.org/en-US/security/advisories/mfsa2025-66
11
reference_url https://www.mozilla.org/security/advisories/mfsa2025-66/
reference_id mfsa2025-66
reference_type
scores
0
value 8.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2025-08-20T03:56:23Z/
url https://www.mozilla.org/security/advisories/mfsa2025-66/
12
reference_url https://www.mozilla.org/en-US/security/advisories/mfsa2025-67
reference_id mfsa2025-67
reference_type
scores
0
value high
scoring_system generic_textual
scoring_elements
url https://www.mozilla.org/en-US/security/advisories/mfsa2025-67
13
reference_url https://www.mozilla.org/security/advisories/mfsa2025-67/
reference_id mfsa2025-67
reference_type
scores
0
value 8.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2025-08-20T03:56:23Z/
url https://www.mozilla.org/security/advisories/mfsa2025-67/
14
reference_url https://www.mozilla.org/en-US/security/advisories/mfsa2025-70
reference_id mfsa2025-70
reference_type
scores
0
value high
scoring_system generic_textual
scoring_elements
url https://www.mozilla.org/en-US/security/advisories/mfsa2025-70
15
reference_url https://www.mozilla.org/security/advisories/mfsa2025-70/
reference_id mfsa2025-70
reference_type
scores
0
value 8.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2025-08-20T03:56:23Z/
url https://www.mozilla.org/security/advisories/mfsa2025-70/
16
reference_url https://www.mozilla.org/en-US/security/advisories/mfsa2025-71
reference_id mfsa2025-71
reference_type
scores
0
value high
scoring_system generic_textual
scoring_elements
url https://www.mozilla.org/en-US/security/advisories/mfsa2025-71
17
reference_url https://www.mozilla.org/security/advisories/mfsa2025-71/
reference_id mfsa2025-71
reference_type
scores
0
value 8.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2025-08-20T03:56:23Z/
url https://www.mozilla.org/security/advisories/mfsa2025-71/
18
reference_url https://www.mozilla.org/en-US/security/advisories/mfsa2025-72
reference_id mfsa2025-72
reference_type
scores
0
value high
scoring_system generic_textual
scoring_elements
url https://www.mozilla.org/en-US/security/advisories/mfsa2025-72
19
reference_url https://www.mozilla.org/security/advisories/mfsa2025-72/
reference_id mfsa2025-72
reference_type
scores
0
value 8.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2025-08-20T03:56:23Z/
url https://www.mozilla.org/security/advisories/mfsa2025-72/
20
reference_url https://access.redhat.com/errata/RHSA-2025:14416
reference_id RHSA-2025:14416
reference_type
scores
url https://access.redhat.com/errata/RHSA-2025:14416
21
reference_url https://access.redhat.com/errata/RHSA-2025:14417
reference_id RHSA-2025:14417
reference_type
scores
url https://access.redhat.com/errata/RHSA-2025:14417
22
reference_url https://access.redhat.com/errata/RHSA-2025:14442
reference_id RHSA-2025:14442
reference_type
scores
url https://access.redhat.com/errata/RHSA-2025:14442
23
reference_url https://access.redhat.com/errata/RHSA-2025:14640
reference_id RHSA-2025:14640
reference_type
scores
url https://access.redhat.com/errata/RHSA-2025:14640
24
reference_url https://access.redhat.com/errata/RHSA-2025:14743
reference_id RHSA-2025:14743
reference_type
scores
url https://access.redhat.com/errata/RHSA-2025:14743
25
reference_url https://access.redhat.com/errata/RHSA-2025:14844
reference_id RHSA-2025:14844
reference_type
scores
url https://access.redhat.com/errata/RHSA-2025:14844
26
reference_url https://access.redhat.com/errata/RHSA-2025:15418
reference_id RHSA-2025:15418
reference_type
scores
url https://access.redhat.com/errata/RHSA-2025:15418
27
reference_url https://access.redhat.com/errata/RHSA-2025:15419
reference_id RHSA-2025:15419
reference_type
scores
url https://access.redhat.com/errata/RHSA-2025:15419
28
reference_url https://access.redhat.com/errata/RHSA-2025:15420
reference_id RHSA-2025:15420
reference_type
scores
url https://access.redhat.com/errata/RHSA-2025:15420
29
reference_url https://access.redhat.com/errata/RHSA-2025:15421
reference_id RHSA-2025:15421
reference_type
scores
url https://access.redhat.com/errata/RHSA-2025:15421
30
reference_url https://access.redhat.com/errata/RHSA-2025:15422
reference_id RHSA-2025:15422
reference_type
scores
url https://access.redhat.com/errata/RHSA-2025:15422
31
reference_url https://access.redhat.com/errata/RHSA-2025:15423
reference_id RHSA-2025:15423
reference_type
scores
url https://access.redhat.com/errata/RHSA-2025:15423
32
reference_url https://access.redhat.com/errata/RHSA-2025:15424
reference_id RHSA-2025:15424
reference_type
scores
url https://access.redhat.com/errata/RHSA-2025:15424
33
reference_url https://access.redhat.com/errata/RHSA-2025:15430
reference_id RHSA-2025:15430
reference_type
scores
url https://access.redhat.com/errata/RHSA-2025:15430
34
reference_url https://access.redhat.com/errata/RHSA-2025:15434
reference_id RHSA-2025:15434
reference_type
scores
url https://access.redhat.com/errata/RHSA-2025:15434
35
reference_url https://access.redhat.com/errata/RHSA-2025:15435
reference_id RHSA-2025:15435
reference_type
scores
url https://access.redhat.com/errata/RHSA-2025:15435
36
reference_url https://access.redhat.com/errata/RHSA-2025:15436
reference_id RHSA-2025:15436
reference_type
scores
url https://access.redhat.com/errata/RHSA-2025:15436
37
reference_url https://access.redhat.com/errata/RHSA-2025:15437
reference_id RHSA-2025:15437
reference_type
scores
url https://access.redhat.com/errata/RHSA-2025:15437
38
reference_url https://access.redhat.com/errata/RHSA-2025:15438
reference_id RHSA-2025:15438
reference_type
scores
url https://access.redhat.com/errata/RHSA-2025:15438
39
reference_url https://access.redhat.com/errata/RHSA-2025:15496
reference_id RHSA-2025:15496
reference_type
scores
url https://access.redhat.com/errata/RHSA-2025:15496
40
reference_url https://access.redhat.com/errata/RHSA-2025:15535
reference_id RHSA-2025:15535
reference_type
scores
url https://access.redhat.com/errata/RHSA-2025:15535
41
reference_url https://usn.ubuntu.com/7991-1/
reference_id USN-7991-1
reference_type
scores
url https://usn.ubuntu.com/7991-1/
fixed_packages
0
url pkg:deb/debian/thunderbird@1:115.12.0-1~deb11u1?distro=trixie
purl pkg:deb/debian/thunderbird@1:115.12.0-1~deb11u1?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/thunderbird@1:115.12.0-1~deb11u1%3Fdistro=trixie
1
url pkg:deb/debian/thunderbird@1:128.14.0esr-1~deb11u1?distro=trixie
purl pkg:deb/debian/thunderbird@1:128.14.0esr-1~deb11u1?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/thunderbird@1:128.14.0esr-1~deb11u1%3Fdistro=trixie
2
url pkg:deb/debian/thunderbird@1:128.14.0esr-1~deb12u1?distro=trixie
purl pkg:deb/debian/thunderbird@1:128.14.0esr-1~deb12u1?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/thunderbird@1:128.14.0esr-1~deb12u1%3Fdistro=trixie
3
url pkg:deb/debian/thunderbird@1:128.14.0esr-1~deb13u1?distro=trixie
purl pkg:deb/debian/thunderbird@1:128.14.0esr-1~deb13u1?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/thunderbird@1:128.14.0esr-1~deb13u1%3Fdistro=trixie
4
url pkg:deb/debian/thunderbird@1:128.14.0esr-1?distro=trixie
purl pkg:deb/debian/thunderbird@1:128.14.0esr-1?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/thunderbird@1:128.14.0esr-1%3Fdistro=trixie
5
url pkg:deb/debian/thunderbird@1:140.6.0esr-1~deb12u1?distro=trixie
purl pkg:deb/debian/thunderbird@1:140.6.0esr-1~deb12u1?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/thunderbird@1:140.6.0esr-1~deb12u1%3Fdistro=trixie
6
url pkg:deb/debian/thunderbird@1:140.8.0esr-1~deb13u1?distro=trixie
purl pkg:deb/debian/thunderbird@1:140.8.0esr-1~deb13u1?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/thunderbird@1:140.8.0esr-1~deb13u1%3Fdistro=trixie
7
url pkg:deb/debian/thunderbird@1:140.9.0esr-1?distro=trixie
purl pkg:deb/debian/thunderbird@1:140.9.0esr-1?distro=trixie
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-5dw5-vpt8-zqbz
1
vulnerability VCID-9ag7-z86d-nba9
2
vulnerability VCID-qbzp-euvv-q7c7
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/thunderbird@1:140.9.0esr-1%3Fdistro=trixie
8
url pkg:deb/debian/thunderbird@1:140.9.1esr-1?distro=trixie
purl pkg:deb/debian/thunderbird@1:140.9.1esr-1?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/thunderbird@1:140.9.1esr-1%3Fdistro=trixie
aliases CVE-2025-9185
risk_score 4.0
exploitability 0.5
weighted_severity 8.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-vz6w-wghm-nqaq
Risk_scorenull
Resource_urlhttp://public2.vulnerablecode.io/packages/pkg:deb/debian/thunderbird@1:128.14.0esr-1~deb11u1%3Fdistro=trixie