Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:deb/debian/thunderbird@1:140.5.0esr-1~deb12u1?distro=trixie
purl pkg:deb/debian/thunderbird@1:140.5.0esr-1~deb12u1?distro=trixie
Vulnerabilities affecting this package (0)
Vulnerability Summary Fixed by
This package is not known to be affected by vulnerabilities.
Vulnerabilities fixed by this package (9)
Vulnerability Summary Aliases
VCID-4bw1-v6ze-kbds Mitigation bypass in the DOM: Security component. This vulnerability affects Firefox < 145, Firefox ESR < 140.5, Thunderbird < 145, and Thunderbird < 140.5. CVE-2025-13018
VCID-4kd3-95cm-g3fc Same-origin policy bypass in the DOM: Workers component. This vulnerability affects Firefox < 145, Firefox ESR < 140.5, Thunderbird < 145, and Thunderbird < 140.5. CVE-2025-13019
VCID-962a-dwqf-3ycg Incorrect boundary conditions in the JavaScript: WebAssembly component. This vulnerability affects Firefox < 145, Firefox ESR < 140.5, Thunderbird < 145, and Thunderbird < 140.5. CVE-2025-13016
VCID-dgwm-n1zx-qkbq Race condition in the Graphics component. This vulnerability affects Firefox < 145, Firefox ESR < 140.5, Firefox ESR < 115.30, Thunderbird < 145, and Thunderbird < 140.5. CVE-2025-13012
VCID-e7jk-vs8y-fyhr Use-after-free in the WebRTC: Audio/Video component. This vulnerability affects Firefox < 145, Firefox ESR < 140.5, Thunderbird < 145, and Thunderbird < 140.5. CVE-2025-13020
VCID-kdwy-7p45-hbcs Spoofing issue in Firefox. This vulnerability affects Firefox < 145, Firefox ESR < 140.5, Firefox ESR < 115.30, Thunderbird < 145, and Thunderbird < 140.5. CVE-2025-13015
VCID-qgvy-hzsx-hkge Use-after-free in the Audio/Video component. This vulnerability affects Firefox < 145, Firefox ESR < 140.5, Firefox ESR < 115.30, Thunderbird < 145, and Thunderbird < 140.5. CVE-2025-13014
VCID-ukut-zyjx-93gq Mitigation bypass in the DOM: Core & HTML component. This vulnerability affects Firefox < 145, Firefox ESR < 140.5, Firefox ESR < 115.30, Thunderbird < 145, and Thunderbird < 140.5. CVE-2025-13013
VCID-wz6r-xzm9-m7hp Same-origin policy bypass in the DOM: Notifications component. This vulnerability affects Firefox < 145, Firefox ESR < 140.5, Thunderbird < 145, and Thunderbird < 140.5. CVE-2025-13017

Date Actor Action Vulnerability Source VulnerableCode Version
2026-04-16T11:45:54.405968+00:00 Debian Importer Fixing VCID-e7jk-vs8y-fyhr https://security-tracker.debian.org/tracker/data/json 38.4.0
2026-04-16T11:08:29.727528+00:00 Debian Importer Fixing VCID-qgvy-hzsx-hkge https://security-tracker.debian.org/tracker/data/json 38.4.0
2026-04-16T11:04:33.501366+00:00 Debian Importer Fixing VCID-962a-dwqf-3ycg https://security-tracker.debian.org/tracker/data/json 38.4.0
2026-04-16T10:31:09.975056+00:00 Debian Importer Fixing VCID-ukut-zyjx-93gq https://security-tracker.debian.org/tracker/data/json 38.4.0
2026-04-16T10:15:16.499031+00:00 Debian Importer Fixing VCID-4bw1-v6ze-kbds https://security-tracker.debian.org/tracker/data/json 38.4.0
2026-04-16T09:33:30.759009+00:00 Debian Importer Fixing VCID-kdwy-7p45-hbcs https://security-tracker.debian.org/tracker/data/json 38.4.0
2026-04-16T09:17:39.934940+00:00 Debian Importer Fixing VCID-dgwm-n1zx-qkbq https://security-tracker.debian.org/tracker/data/json 38.4.0
2026-04-16T09:05:13.648764+00:00 Debian Importer Fixing VCID-wz6r-xzm9-m7hp https://security-tracker.debian.org/tracker/data/json 38.4.0
2026-04-16T08:50:18.997511+00:00 Debian Importer Fixing VCID-4kd3-95cm-g3fc https://security-tracker.debian.org/tracker/data/json 38.4.0
2026-04-13T09:05:57.208628+00:00 Debian Importer Fixing VCID-4bw1-v6ze-kbds https://security-tracker.debian.org/tracker/data/json 38.3.0
2026-04-13T08:01:22.475728+00:00 Debian Importer Fixing VCID-e7jk-vs8y-fyhr https://security-tracker.debian.org/tracker/data/json 38.3.0
2026-04-13T07:35:22.734828+00:00 Debian Importer Fixing VCID-kdwy-7p45-hbcs https://security-tracker.debian.org/tracker/data/json 38.3.0
2026-04-13T07:34:14.929033+00:00 Debian Importer Fixing VCID-qgvy-hzsx-hkge https://security-tracker.debian.org/tracker/data/json 38.3.0
2026-04-13T07:31:17.841693+00:00 Debian Importer Fixing VCID-962a-dwqf-3ycg https://security-tracker.debian.org/tracker/data/json 38.3.0
2026-04-13T07:06:04.387348+00:00 Debian Importer Fixing VCID-ukut-zyjx-93gq https://security-tracker.debian.org/tracker/data/json 38.3.0
2026-04-13T06:47:13.575021+00:00 Debian Importer Fixing VCID-dgwm-n1zx-qkbq https://security-tracker.debian.org/tracker/data/json 38.3.0
2026-04-13T06:43:34.314987+00:00 Debian Importer Fixing VCID-4kd3-95cm-g3fc https://security-tracker.debian.org/tracker/data/json 38.3.0
2026-04-11T18:05:20.559422+00:00 Debian Importer Fixing VCID-wz6r-xzm9-m7hp https://security-tracker.debian.org/tracker/data/json 38.3.0
2026-04-03T07:54:54.280025+00:00 Debian Importer Fixing VCID-e7jk-vs8y-fyhr https://security-tracker.debian.org/tracker/data/json 38.1.0
2026-04-03T07:54:54.217201+00:00 Debian Importer Fixing VCID-4kd3-95cm-g3fc https://security-tracker.debian.org/tracker/data/json 38.1.0
2026-04-03T07:54:54.154575+00:00 Debian Importer Fixing VCID-4bw1-v6ze-kbds https://security-tracker.debian.org/tracker/data/json 38.1.0
2026-04-03T07:54:54.092516+00:00 Debian Importer Fixing VCID-wz6r-xzm9-m7hp https://security-tracker.debian.org/tracker/data/json 38.1.0
2026-04-03T07:54:54.031050+00:00 Debian Importer Fixing VCID-962a-dwqf-3ycg https://security-tracker.debian.org/tracker/data/json 38.1.0
2026-04-03T07:54:53.969721+00:00 Debian Importer Fixing VCID-kdwy-7p45-hbcs https://security-tracker.debian.org/tracker/data/json 38.1.0
2026-04-03T07:54:53.908726+00:00 Debian Importer Fixing VCID-qgvy-hzsx-hkge https://security-tracker.debian.org/tracker/data/json 38.1.0
2026-04-03T07:54:53.847215+00:00 Debian Importer Fixing VCID-ukut-zyjx-93gq https://security-tracker.debian.org/tracker/data/json 38.1.0
2026-04-03T07:54:53.780777+00:00 Debian Importer Fixing VCID-dgwm-n1zx-qkbq https://security-tracker.debian.org/tracker/data/json 38.1.0