Search for packages
| purl | pkg:rpm/redhat/thunderbird@140.9.1-1?arch=el9_7 |
| Next non-vulnerable version | None. |
| Latest non-vulnerable version | None. |
| Risk |
| Vulnerability | Summary | Fixed by |
|---|---|---|
|
VCID-5dw5-vpt8-zqbz
Aliases: CVE-2026-5731 |
Memory safety bugs present in Firefox ESR 115.34.0, Firefox ESR 140.9.0, Thunderbird ESR 140.9.0, Firefox 149.0.1 and Thunderbird 149.0.1. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. | There are no reported fixed by versions. |
|
VCID-9ag7-z86d-nba9
Aliases: CVE-2026-5734 |
Memory safety bugs present in Firefox ESR 140.9.0, Thunderbird ESR 140.9.0, Firefox 149.0.1 and Thunderbird 149.0.1. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. | There are no reported fixed by versions. |
|
VCID-dm7h-c7wt-1kbs
Aliases: CVE-2026-33416 |
libpng: libpng: Arbitrary code execution due to use-after-free vulnerability | There are no reported fixed by versions. |
|
VCID-ptgq-884e-mkft
Aliases: CVE-2026-33636 |
libpng: libpng: Information disclosure and denial of service via out-of-bounds read/write in Neon palette expansion | There are no reported fixed by versions. |
|
VCID-qbzp-euvv-q7c7
Aliases: CVE-2026-5732 |
There are no reported fixed by versions. |
| Vulnerability | Summary | Aliases |
|---|---|---|
| This package is not known to fix vulnerabilities. | ||
| Date | Actor | Action | Vulnerability | Source | VulnerableCode Version |
|---|---|---|---|---|---|
| 2026-04-19T06:25:03.112709+00:00 | RedHat Importer | Affected by | VCID-dm7h-c7wt-1kbs | https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2026-33416.json | 38.4.0 |
| 2026-04-19T06:25:03.024774+00:00 | RedHat Importer | Affected by | VCID-ptgq-884e-mkft | https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2026-33636.json | 38.4.0 |
| 2026-04-19T06:25:02.593265+00:00 | RedHat Importer | Affected by | VCID-5dw5-vpt8-zqbz | https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2026-5731.json | 38.4.0 |
| 2026-04-19T06:25:02.519635+00:00 | RedHat Importer | Affected by | VCID-qbzp-euvv-q7c7 | https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2026-5732.json | 38.4.0 |
| 2026-04-19T06:25:02.446125+00:00 | RedHat Importer | Affected by | VCID-9ag7-z86d-nba9 | https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2026-5734.json | 38.4.0 |