Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:deb/debian/thunderbird@1:115.4.1-1~deb12u1?distro=trixie
purl pkg:deb/debian/thunderbird@1:115.4.1-1~deb12u1?distro=trixie
Vulnerabilities affecting this package (0)
Vulnerability Summary Fixed by
This package is not known to be affected by vulnerabilities.
Vulnerabilities fixed by this package (6)
Vulnerability Summary Aliases
VCID-8g6u-u53m-hbhd Drivers are not always robust to extremely large draw calls and in some cases this scenario could have led to a crash. CVE-2023-5724
VCID-bwzh-bspg-v7f8 Memory safety bugs present in Firefox 118, Firefox ESR 115.3, and Thunderbird 115.3. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. CVE-2023-5730
VCID-e3a2-mhd3-d3c9 During garbage collection extra operations were performed on a object that should not be. This could have led to a potentially exploitable crash. CVE-2023-5728
VCID-gszc-kcve-m7ht An attacker could have created a malicious link using bidirectional characters to spoof the location in the address bar when visited. CVE-2023-5732
VCID-j1x8-u8y4-cfd1 A malicious installed WebExtension could open arbitrary URLs, which under the right circumstance could be leveraged to collect sensitive user data. CVE-2023-5725
VCID-x5fv-e9ne-d7du It was possible for certain browser prompts and dialogs to be activated or dismissed unintentionally by the user due to an insufficient activation-delay. CVE-2023-5721

Date Actor Action Vulnerability Source VulnerableCode Version
2026-05-29T17:15:14.709802+00:00 Debian Importer Fixing VCID-gszc-kcve-m7ht https://security-tracker.debian.org/tracker/data/json 38.6.0
2026-05-29T17:15:14.683280+00:00 Debian Importer Fixing VCID-bwzh-bspg-v7f8 https://security-tracker.debian.org/tracker/data/json 38.6.0
2026-05-29T17:15:14.655980+00:00 Debian Importer Fixing VCID-e3a2-mhd3-d3c9 https://security-tracker.debian.org/tracker/data/json 38.6.0
2026-05-29T17:15:14.577344+00:00 Debian Importer Fixing VCID-j1x8-u8y4-cfd1 https://security-tracker.debian.org/tracker/data/json 38.6.0
2026-05-29T17:15:14.541859+00:00 Debian Importer Fixing VCID-8g6u-u53m-hbhd https://security-tracker.debian.org/tracker/data/json 38.6.0
2026-05-29T17:15:14.510450+00:00 Debian Importer Fixing VCID-x5fv-e9ne-d7du https://security-tracker.debian.org/tracker/data/json 38.6.0