Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:deb/debian/thunderbird@1:140.5.0esr-1~deb13u1?distro=trixie
purl pkg:deb/debian/thunderbird@1:140.5.0esr-1~deb13u1?distro=trixie
Vulnerabilities affecting this package (0)
Vulnerability Summary Fixed by
This package is not known to be affected by vulnerabilities.
Vulnerabilities fixed by this package (9)
Vulnerability Summary Aliases
VCID-4bw1-v6ze-kbds Mitigation bypass in the DOM: Security component. This vulnerability affects Firefox < 145, Firefox ESR < 140.5, Thunderbird < 145, and Thunderbird < 140.5. CVE-2025-13018
VCID-4kd3-95cm-g3fc Same-origin policy bypass in the DOM: Workers component. This vulnerability affects Firefox < 145, Firefox ESR < 140.5, Thunderbird < 145, and Thunderbird < 140.5. CVE-2025-13019
VCID-962a-dwqf-3ycg Incorrect boundary conditions in the JavaScript: WebAssembly component. This vulnerability affects Firefox < 145, Firefox ESR < 140.5, Thunderbird < 145, and Thunderbird < 140.5. CVE-2025-13016
VCID-dgwm-n1zx-qkbq Race condition in the Graphics component. This vulnerability affects Firefox < 145, Firefox ESR < 140.5, Firefox ESR < 115.30, Thunderbird < 145, and Thunderbird < 140.5. CVE-2025-13012
VCID-e7jk-vs8y-fyhr Use-after-free in the WebRTC: Audio/Video component. This vulnerability affects Firefox < 145, Firefox ESR < 140.5, Thunderbird < 145, and Thunderbird < 140.5. CVE-2025-13020
VCID-kdwy-7p45-hbcs Spoofing issue in Firefox. This vulnerability affects Firefox < 145, Firefox ESR < 140.5, Firefox ESR < 115.30, Thunderbird < 145, and Thunderbird < 140.5. CVE-2025-13015
VCID-qgvy-hzsx-hkge Use-after-free in the Audio/Video component. This vulnerability affects Firefox < 145, Firefox ESR < 140.5, Firefox ESR < 115.30, Thunderbird < 145, and Thunderbird < 140.5. CVE-2025-13014
VCID-ukut-zyjx-93gq Mitigation bypass in the DOM: Core & HTML component. This vulnerability affects Firefox < 145, Firefox ESR < 140.5, Firefox ESR < 115.30, Thunderbird < 145, and Thunderbird < 140.5. CVE-2025-13013
VCID-wz6r-xzm9-m7hp Same-origin policy bypass in the DOM: Notifications component. This vulnerability affects Firefox < 145, Firefox ESR < 140.5, Thunderbird < 145, and Thunderbird < 140.5. CVE-2025-13017

Date Actor Action Vulnerability Source VulnerableCode Version
2026-04-16T11:45:54.410901+00:00 Debian Importer Fixing VCID-e7jk-vs8y-fyhr https://security-tracker.debian.org/tracker/data/json 38.4.0
2026-04-16T11:08:29.732627+00:00 Debian Importer Fixing VCID-qgvy-hzsx-hkge https://security-tracker.debian.org/tracker/data/json 38.4.0
2026-04-16T11:04:33.506574+00:00 Debian Importer Fixing VCID-962a-dwqf-3ycg https://security-tracker.debian.org/tracker/data/json 38.4.0
2026-04-16T10:31:09.979943+00:00 Debian Importer Fixing VCID-ukut-zyjx-93gq https://security-tracker.debian.org/tracker/data/json 38.4.0
2026-04-16T10:15:16.503696+00:00 Debian Importer Fixing VCID-4bw1-v6ze-kbds https://security-tracker.debian.org/tracker/data/json 38.4.0
2026-04-16T09:33:30.763732+00:00 Debian Importer Fixing VCID-kdwy-7p45-hbcs https://security-tracker.debian.org/tracker/data/json 38.4.0
2026-04-16T09:17:39.939962+00:00 Debian Importer Fixing VCID-dgwm-n1zx-qkbq https://security-tracker.debian.org/tracker/data/json 38.4.0
2026-04-16T09:05:13.653903+00:00 Debian Importer Fixing VCID-wz6r-xzm9-m7hp https://security-tracker.debian.org/tracker/data/json 38.4.0
2026-04-16T08:50:19.002454+00:00 Debian Importer Fixing VCID-4kd3-95cm-g3fc https://security-tracker.debian.org/tracker/data/json 38.4.0
2026-04-13T09:05:57.213990+00:00 Debian Importer Fixing VCID-4bw1-v6ze-kbds https://security-tracker.debian.org/tracker/data/json 38.3.0
2026-04-13T08:01:22.481095+00:00 Debian Importer Fixing VCID-e7jk-vs8y-fyhr https://security-tracker.debian.org/tracker/data/json 38.3.0
2026-04-13T07:35:22.740143+00:00 Debian Importer Fixing VCID-kdwy-7p45-hbcs https://security-tracker.debian.org/tracker/data/json 38.3.0
2026-04-13T07:34:14.934738+00:00 Debian Importer Fixing VCID-qgvy-hzsx-hkge https://security-tracker.debian.org/tracker/data/json 38.3.0
2026-04-13T07:31:17.846821+00:00 Debian Importer Fixing VCID-962a-dwqf-3ycg https://security-tracker.debian.org/tracker/data/json 38.3.0
2026-04-13T07:06:04.390188+00:00 Debian Importer Fixing VCID-ukut-zyjx-93gq https://security-tracker.debian.org/tracker/data/json 38.3.0
2026-04-13T06:47:13.579947+00:00 Debian Importer Fixing VCID-dgwm-n1zx-qkbq https://security-tracker.debian.org/tracker/data/json 38.3.0
2026-04-13T06:43:34.320409+00:00 Debian Importer Fixing VCID-4kd3-95cm-g3fc https://security-tracker.debian.org/tracker/data/json 38.3.0
2026-04-11T18:05:20.564727+00:00 Debian Importer Fixing VCID-wz6r-xzm9-m7hp https://security-tracker.debian.org/tracker/data/json 38.3.0
2026-04-03T07:54:54.321591+00:00 Debian Importer Fixing VCID-e7jk-vs8y-fyhr https://security-tracker.debian.org/tracker/data/json 38.1.0
2026-04-03T07:54:54.258900+00:00 Debian Importer Fixing VCID-4kd3-95cm-g3fc https://security-tracker.debian.org/tracker/data/json 38.1.0
2026-04-03T07:54:54.196005+00:00 Debian Importer Fixing VCID-4bw1-v6ze-kbds https://security-tracker.debian.org/tracker/data/json 38.1.0
2026-04-03T07:54:54.133548+00:00 Debian Importer Fixing VCID-wz6r-xzm9-m7hp https://security-tracker.debian.org/tracker/data/json 38.1.0
2026-04-03T07:54:54.071617+00:00 Debian Importer Fixing VCID-962a-dwqf-3ycg https://security-tracker.debian.org/tracker/data/json 38.1.0
2026-04-03T07:54:54.010317+00:00 Debian Importer Fixing VCID-kdwy-7p45-hbcs https://security-tracker.debian.org/tracker/data/json 38.1.0
2026-04-03T07:54:53.949111+00:00 Debian Importer Fixing VCID-qgvy-hzsx-hkge https://security-tracker.debian.org/tracker/data/json 38.1.0
2026-04-03T07:54:53.888007+00:00 Debian Importer Fixing VCID-ukut-zyjx-93gq https://security-tracker.debian.org/tracker/data/json 38.1.0
2026-04-03T07:54:53.826449+00:00 Debian Importer Fixing VCID-dgwm-n1zx-qkbq https://security-tracker.debian.org/tracker/data/json 38.1.0