Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:alpm/archlinux/thunderbird@68.11.0-1
purl pkg:alpm/archlinux/thunderbird@68.11.0-1
Next non-vulnerable version 68.12.0-1
Latest non-vulnerable version 91.10-1
Risk 4.5
Vulnerabilities affecting this package (9)
Vulnerability Summary Fixed by
VCID-14gr-rfym-5yha
Aliases:
CVE-2020-6463
Multiple vulnerabilities have been found in Mozilla Firefox, the worst of which could result in the arbitrary execution of code.
68.12.0-1
Affected by 0 other vulnerabilities.
VCID-6h7s-a74e-33c1
Aliases:
CVE-2020-15653
Mozilla developer Anne van Kesteren discovered that <iframe sandbox> with the allow-popups flag could be bypassed when using noopener links. This could have led to security issues for websites relying on sandbox configurations that allowed popups and hosted arbitrary content.
68.12.0-1
Affected by 0 other vulnerabilities.
VCID-9tc4-qr6d-6kfu
Aliases:
CVE-2020-15654
When in an endless loop, a website specifying a custom cursor using CSS could make it look like the user is interacting with the user interface, when they are not. This could lead to a perceived broken state, especially when interactions with existing browser dialogs and warnings do not work.
68.12.0-1
Affected by 0 other vulnerabilities.
VCID-ak2m-xsvt-eqbs
Aliases:
CVE-2020-15652
Multiple vulnerabilities have been found in Mozilla Firefox, the worst of which could result in the arbitrary execution of code.
68.12.0-1
Affected by 0 other vulnerabilities.
VCID-awnf-jwg6-k3bk
Aliases:
CVE-2020-15655
Mozilla Developer Rob Wu discovered that a redirected HTTP request which is observed or modified through a web extension could bypass existing CORS checks, leading to potential disclosure of cross-origin information.
68.12.0-1
Affected by 0 other vulnerabilities.
VCID-f8fw-f3kt-8feb
Aliases:
CVE-2020-6514
Multiple vulnerabilities have been found in Chromium and Google Chrome, the worst of which could result in the arbitrary execution of code.
68.12.0-1
Affected by 0 other vulnerabilities.
VCID-h4r6-jrxh-6kcf
Aliases:
CVE-2020-15656
JIT optimizations involving the Javascript arguments object could confuse later optimizations. This risk was already mitigated by various precautions in the code, resulting in this bug rated at only moderate severity.
68.12.0-1
Affected by 0 other vulnerabilities.
VCID-jtyr-jd5m-87c3
Aliases:
CVE-2020-15659
Multiple vulnerabilities have been found in Mozilla Firefox, the worst of which could result in the arbitrary execution of code.
68.12.0-1
Affected by 0 other vulnerabilities.
VCID-qhwf-9n5n-hbaa
Aliases:
CVE-2020-15658
The code for downloading files did not properly take care of special characters, which led to an attacker being able to cut off the file ending at an earlier position, leading to a different file type being downloaded than shown in the dialog.
68.12.0-1
Affected by 0 other vulnerabilities.
Vulnerabilities fixed by this package (0)
Vulnerability Summary Aliases
This package is not known to fix vulnerabilities.

Date Actor Action Vulnerability Source VulnerableCode Version
2026-04-01T18:25:48.432742+00:00 Arch Linux Importer Affected by VCID-ak2m-xsvt-eqbs https://security.archlinux.org/AVG-1214 38.0.0
2026-04-01T18:25:48.411415+00:00 Arch Linux Importer Affected by VCID-6h7s-a74e-33c1 https://security.archlinux.org/AVG-1214 38.0.0
2026-04-01T18:25:48.389026+00:00 Arch Linux Importer Affected by VCID-9tc4-qr6d-6kfu https://security.archlinux.org/AVG-1214 38.0.0
2026-04-01T18:25:48.366264+00:00 Arch Linux Importer Affected by VCID-awnf-jwg6-k3bk https://security.archlinux.org/AVG-1214 38.0.0
2026-04-01T18:25:48.344729+00:00 Arch Linux Importer Affected by VCID-h4r6-jrxh-6kcf https://security.archlinux.org/AVG-1214 38.0.0
2026-04-01T18:25:48.320088+00:00 Arch Linux Importer Affected by VCID-qhwf-9n5n-hbaa https://security.archlinux.org/AVG-1214 38.0.0
2026-04-01T18:25:48.296089+00:00 Arch Linux Importer Affected by VCID-jtyr-jd5m-87c3 https://security.archlinux.org/AVG-1214 38.0.0
2026-04-01T18:25:48.273804+00:00 Arch Linux Importer Affected by VCID-14gr-rfym-5yha https://security.archlinux.org/AVG-1214 38.0.0
2026-04-01T18:25:48.250373+00:00 Arch Linux Importer Affected by VCID-f8fw-f3kt-8feb https://security.archlinux.org/AVG-1214 38.0.0