Search for packages
Package details: pkg:deb/debian/thunderbird@1:138.0-1
purl pkg:deb/debian/thunderbird@1:138.0-1
Vulnerabilities affecting this package (0)
Vulnerability Summary Fixed by
This package is not known to be affected by vulnerabilities.
Vulnerabilities fixed by this package (1)
Vulnerability Summary Aliases
VCID-uene-df28-t3bf By crafting a malformed file name for an attachment in a multipart message, an attacker can trick Thunderbird into including a directory listing of /tmp when the message is forwarded or edited as a new message. This vulnerability could allow attackers to disclose sensitive information from the victim's system. This vulnerability is not limited to Linux; similar behavior has been observed on Windows as well. CVE-2025-2830

Date Actor Action Vulnerability Source VulnerableCode Version
2025-05-15T10:42:40.158054+00:00 Debian Importer Fixing VCID-uene-df28-t3bf https://security-tracker.debian.org/tracker/data/json 36.0.0