Search for packages
Package details: pkg:alpm/archlinux/thunderbird@60.2.1-2
purl pkg:alpm/archlinux/thunderbird@60.2.1-2
Next non-vulnerable version 60.3.0-1
Latest non-vulnerable version 91.10-1
Risk 4.5
Vulnerabilities affecting this package (3)
Vulnerability Summary Fixed by
VCID-38dh-5u7n-aaan
Aliases:
CVE-2018-12392
When manipulating user events in nested loops while opening a document through script, it is possible to trigger a potentially exploitable crash due to poor event handling. This vulnerability affects Firefox < 63, Firefox ESR < 60.3, and Thunderbird < 60.3.
60.3.0-1
Affected by 0 other vulnerabilities.
VCID-6dnw-5kdb-aaag
Aliases:
CVE-2018-12389
Mozilla developers and community members reported memory safety bugs present in Firefox ESR 60.2. Some of these bugs showed evidence of memory corruption and we presume that with enough effort that some of these could be exploited to run arbitrary code. This vulnerability affects Firefox ESR < 60.3 and Thunderbird < 60.3.
60.3.0-1
Affected by 0 other vulnerabilities.
VCID-7wpp-kat6-aaae
Aliases:
CVE-2018-12390
Mozilla developers and community members reported memory safety bugs present in Firefox 62 and Firefox ESR 60.2. Some of these bugs showed evidence of memory corruption and we presume that with enough effort that some of these could be exploited to run arbitrary code. This vulnerability affects Firefox < 63, Firefox ESR < 60.3, and Thunderbird < 60.3.
60.3.0-1
Affected by 0 other vulnerabilities.
Vulnerabilities fixed by this package (0)
Vulnerability Summary Aliases
This package is not known to fix vulnerabilities.

Date Actor Action Vulnerability Source VulnerableCode Version
2025-03-28T07:44:31.478146+00:00 Arch Linux Importer Affected by VCID-6dnw-5kdb-aaag https://security.archlinux.org/AVG-803 36.0.0
2025-03-28T07:44:31.457400+00:00 Arch Linux Importer Affected by VCID-7wpp-kat6-aaae https://security.archlinux.org/AVG-803 36.0.0
2025-03-28T07:44:31.436847+00:00 Arch Linux Importer Affected by VCID-38dh-5u7n-aaan https://security.archlinux.org/AVG-803 36.0.0
2024-09-18T01:59:35.989971+00:00 Arch Linux Importer Affected by VCID-6dnw-5kdb-aaag https://security.archlinux.org/AVG-803 34.0.1
2024-09-18T01:59:35.965333+00:00 Arch Linux Importer Affected by VCID-7wpp-kat6-aaae https://security.archlinux.org/AVG-803 34.0.1
2024-09-18T01:59:35.938994+00:00 Arch Linux Importer Affected by VCID-38dh-5u7n-aaan https://security.archlinux.org/AVG-803 34.0.1
2024-01-09T19:34:36.651426+00:00 Arch Linux Importer Affected by VCID-6dnw-5kdb-aaag https://security.archlinux.org/AVG-803 34.0.0rc2
2024-01-09T19:34:36.629087+00:00 Arch Linux Importer Affected by VCID-7wpp-kat6-aaae https://security.archlinux.org/AVG-803 34.0.0rc2
2024-01-09T19:34:36.606899+00:00 Arch Linux Importer Affected by VCID-38dh-5u7n-aaan https://security.archlinux.org/AVG-803 34.0.0rc2
2024-01-03T22:25:52.064427+00:00 Arch Linux Importer Affected by VCID-6dnw-5kdb-aaag https://security.archlinux.org/AVG-803 34.0.0rc1
2024-01-03T22:25:52.042897+00:00 Arch Linux Importer Affected by VCID-7wpp-kat6-aaae https://security.archlinux.org/AVG-803 34.0.0rc1
2024-01-03T22:25:52.021346+00:00 Arch Linux Importer Affected by VCID-38dh-5u7n-aaan https://security.archlinux.org/AVG-803 34.0.0rc1