Staging Environment: Content and features may be unstable or change without notice.
Search for vulnerabilities
Vulnerability details: VCID-s3vw-7gyn-ubdt
Vulnerability ID VCID-s3vw-7gyn-ubdt
Aliases CVE-2023-3600
Summary Multiple vulnerabilities have been discovered in Mozilla Thunderbird, the worst of which could lead to remote code execution.
Status Published
Exploitability 0.5
Weighted Severity 8.0
Risk 4.0
Affected and Fixed Packages Package Details
Weaknesses (1)
CWE-416 Use After Free
System Score Found at
cvssv3 8.8 https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2023-3600.json
epss 0.00178 https://api.first.org/data/v1/epss?cve=CVE-2023-3600
epss 0.00178 https://api.first.org/data/v1/epss?cve=CVE-2023-3600
epss 0.00178 https://api.first.org/data/v1/epss?cve=CVE-2023-3600
epss 0.00178 https://api.first.org/data/v1/epss?cve=CVE-2023-3600
epss 0.00178 https://api.first.org/data/v1/epss?cve=CVE-2023-3600
epss 0.00181 https://api.first.org/data/v1/epss?cve=CVE-2023-3600
epss 0.00181 https://api.first.org/data/v1/epss?cve=CVE-2023-3600
epss 0.00181 https://api.first.org/data/v1/epss?cve=CVE-2023-3600
epss 0.00181 https://api.first.org/data/v1/epss?cve=CVE-2023-3600
epss 0.00181 https://api.first.org/data/v1/epss?cve=CVE-2023-3600
epss 0.00181 https://api.first.org/data/v1/epss?cve=CVE-2023-3600
epss 0.00181 https://api.first.org/data/v1/epss?cve=CVE-2023-3600
epss 0.00181 https://api.first.org/data/v1/epss?cve=CVE-2023-3600
epss 0.00181 https://api.first.org/data/v1/epss?cve=CVE-2023-3600
ssvc Track https://bugzilla.mozilla.org/show_bug.cgi?id=1839703
cvssv3.1 7.5 https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
generic_textual high https://www.mozilla.org/en-US/security/advisories/mfsa2023-26
generic_textual high https://www.mozilla.org/en-US/security/advisories/mfsa2023-27
ssvc Track https://www.mozilla.org/security/advisories/mfsa2023-26/
ssvc Track https://www.mozilla.org/security/advisories/mfsa2023-27/
Reference id Reference type URL
https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2023-3600.json
https://api.first.org/data/v1/epss?cve=CVE-2023-3600
https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
2222652 https://bugzilla.redhat.com/show_bug.cgi?id=2222652
GLSA-202402-25 https://security.gentoo.org/glsa/202402-25
mfsa2023-26 https://www.mozilla.org/en-US/security/advisories/mfsa2023-26
mfsa2023-26 https://www.mozilla.org/security/advisories/mfsa2023-26/
mfsa2023-27 https://www.mozilla.org/en-US/security/advisories/mfsa2023-27
mfsa2023-27 https://www.mozilla.org/security/advisories/mfsa2023-27/
RHSA-2023:5426 https://access.redhat.com/errata/RHSA-2023:5426
RHSA-2023:5427 https://access.redhat.com/errata/RHSA-2023:5427
RHSA-2023:5428 https://access.redhat.com/errata/RHSA-2023:5428
RHSA-2023:5429 https://access.redhat.com/errata/RHSA-2023:5429
RHSA-2023:5430 https://access.redhat.com/errata/RHSA-2023:5430
RHSA-2023:5432 https://access.redhat.com/errata/RHSA-2023:5432
RHSA-2023:5433 https://access.redhat.com/errata/RHSA-2023:5433
RHSA-2023:5434 https://access.redhat.com/errata/RHSA-2023:5434
RHSA-2023:5435 https://access.redhat.com/errata/RHSA-2023:5435
RHSA-2023:5436 https://access.redhat.com/errata/RHSA-2023:5436
RHSA-2023:5437 https://access.redhat.com/errata/RHSA-2023:5437
RHSA-2023:5438 https://access.redhat.com/errata/RHSA-2023:5438
RHSA-2023:5439 https://access.redhat.com/errata/RHSA-2023:5439
RHSA-2023:5440 https://access.redhat.com/errata/RHSA-2023:5440
RHSA-2023:5475 https://access.redhat.com/errata/RHSA-2023:5475
RHSA-2023:5477 https://access.redhat.com/errata/RHSA-2023:5477
show_bug.cgi?id=1839703 https://bugzilla.mozilla.org/show_bug.cgi?id=1839703
USN-6218-1 https://usn.ubuntu.com/6218-1/
USN-6405-1 https://usn.ubuntu.com/6405-1/
No exploits are available.
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H Found at https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2023-3600.json
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2024-11-07T16:47:10Z/ Found at https://bugzilla.mozilla.org/show_bug.cgi?id=1839703
Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H Found at https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2024-11-07T16:47:10Z/ Found at https://www.mozilla.org/security/advisories/mfsa2023-26/
Vector: SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2024-11-07T16:47:10Z/ Found at https://www.mozilla.org/security/advisories/mfsa2023-27/
Exploit Prediction Scoring System (EPSS)
Percentile 0.39362
EPSS Score 0.00178
Published At April 18, 2026, 12:55 p.m.
Date Actor Action Source VulnerableCode Version
2026-04-01T13:04:39.570604+00:00 Gentoo Importer Import https://security.gentoo.org/glsa/202402-25 38.0.0