Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:rpm/redhat/thunderbird@115.10.0-2?arch=el9_0
purl pkg:rpm/redhat/thunderbird@115.10.0-2?arch=el9_0
Next non-vulnerable version None.
Latest non-vulnerable version None.
Risk 4.0
Vulnerabilities affecting this package (8)
Vulnerability Summary Fixed by
VCID-2zdh-azdw-tuav
Aliases:
CVE-2024-2609
Multiple vulnerabilities have been discovered in Mozilla Thunderbird, the worst of which could lead to remote code execution. There are no reported fixed by versions.
VCID-3pvs-3ppc-r7a5
Aliases:
CVE-2024-3857
Multiple vulnerabilities have been discovered in Mozilla Thunderbird, the worst of which could lead to remote code execution. There are no reported fixed by versions.
VCID-4nqf-nxkj-x3g4
Aliases:
CVE-2024-3852
GetBoundName could return the wrong version of an object when JIT optimizations were applied. There are no reported fixed by versions.
VCID-8sba-dejt-vqfp
Aliases:
CVE-2024-3861
Multiple vulnerabilities have been discovered in Mozilla Thunderbird, the worst of which could lead to remote code execution. There are no reported fixed by versions.
VCID-abt2-6a7f-pfba
Aliases:
CVE-2024-3864
Multiple vulnerabilities have been discovered in Mozilla Thunderbird, the worst of which could lead to remote code execution. There are no reported fixed by versions.
VCID-h5ub-djvf-nffv
Aliases:
CVE-2024-3302
Multiple vulnerabilities have been discovered in Mozilla Thunderbird, the worst of which could lead to remote code execution. There are no reported fixed by versions.
VCID-ku26-71r1-vfem
Aliases:
CVE-2024-3854
Multiple vulnerabilities have been discovered in Mozilla Thunderbird, the worst of which could lead to remote code execution. There are no reported fixed by versions.
VCID-mfs8-2vzs-pybf
Aliases:
CVE-2024-3859
Multiple vulnerabilities have been discovered in Mozilla Thunderbird, the worst of which could lead to remote code execution. There are no reported fixed by versions.
Vulnerabilities fixed by this package (0)
Vulnerability Summary Aliases
This package is not known to fix vulnerabilities.

Date Actor Action Vulnerability Source VulnerableCode Version
2026-04-01T13:48:22.664892+00:00 RedHat Importer Affected by VCID-abt2-6a7f-pfba https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2024-3864.json 38.0.0
2026-04-01T13:48:21.959203+00:00 RedHat Importer Affected by VCID-8sba-dejt-vqfp https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2024-3861.json 38.0.0
2026-04-01T13:48:21.235676+00:00 RedHat Importer Affected by VCID-mfs8-2vzs-pybf https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2024-3859.json 38.0.0
2026-04-01T13:48:20.535478+00:00 RedHat Importer Affected by VCID-2zdh-azdw-tuav https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2024-2609.json 38.0.0
2026-04-01T13:48:19.826999+00:00 RedHat Importer Affected by VCID-3pvs-3ppc-r7a5 https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2024-3857.json 38.0.0
2026-04-01T13:48:19.154703+00:00 RedHat Importer Affected by VCID-ku26-71r1-vfem https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2024-3854.json 38.0.0
2026-04-01T13:48:18.475596+00:00 RedHat Importer Affected by VCID-4nqf-nxkj-x3g4 https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2024-3852.json 38.0.0
2026-04-01T13:48:17.019465+00:00 RedHat Importer Affected by VCID-h5ub-djvf-nffv https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2024-3302.json 38.0.0