Search for packages
| purl | pkg:rpm/redhat/thunderbird@115.9.0-1?arch=el9_2 |
| Next non-vulnerable version | None. |
| Latest non-vulnerable version | None. |
| Risk | 4.0 |
| Vulnerability | Summary | Fixed by |
|---|---|---|
|
VCID-2tts-gwgd-zqcz
Aliases: CVE-2023-5388 |
A vulnerability has been discovered in NSS, which can lead to the recovery of private data. | There are no reported fixed by versions. |
|
VCID-3vbp-2h4f-7bav
Aliases: CVE-2024-2611 |
A missing delay on when pointer lock was used could have allowed a malicious page to trick a user into granting permissions. | There are no reported fixed by versions. |
|
VCID-41g2-dvb2-yqhg
Aliases: CVE-2024-2614 |
Memory safety bugs present in Firefox 123, Firefox ESR 115.8, and Thunderbird 115.8. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. | There are no reported fixed by versions. |
|
VCID-46cy-x3cp-tke5
Aliases: CVE-2024-0743 |
Multiple vulnerabilities have been discovered in Mozilla Firefox, the worst of which could result in arbitrary code execution. | There are no reported fixed by versions. |
|
VCID-b5y9-qmw5-nkbv
Aliases: CVE-2024-2612 |
If an attacker could find a way to trigger a particular code path in SafeRefPtr, it could have triggered a crash or potentially be leveraged to achieve code execution. | There are no reported fixed by versions. |
|
VCID-g24d-23zk-6fgn
Aliases: CVE-2024-2608 |
AppendEncodedAttributeValue(), ExtraSpaceNeededForAttrEncoding() and AppendEncodedCharacters() could have experienced integer overflows, causing underallocation of an output buffer leading to an out of bounds write. | There are no reported fixed by versions. |
|
VCID-n8gb-hpjb-v7a5
Aliases: CVE-2024-2607 |
Return registers were overwritten which could have allowed an attacker to execute arbitrary code. *Note:* This issue only affected Armv7-A systems. Other operating systems are unaffected. | There are no reported fixed by versions. |
|
VCID-pse8-xnc7-gkbv
Aliases: CVE-2024-2610 |
Using a markup injection an attacker could have stolen nonce values. This could have been used to bypass strict content security policies. | There are no reported fixed by versions. |
|
VCID-yg34-x56m-rufk
Aliases: CVE-2024-1936 |
Multiple vulnerabilities have been discovered in Mozilla Thunderbird, the worst of which could lead to remote code execution. | There are no reported fixed by versions. |
| Vulnerability | Summary | Aliases |
|---|---|---|
| This package is not known to fix vulnerabilities. | ||