Staging Environment: Content and features may be unstable or change without notice.
Search for vulnerabilities
Vulnerability details: VCID-gpjz-649k-f3he
Vulnerability ID VCID-gpjz-649k-f3he
Aliases CVE-2024-5696
Summary Multiple vulnerabilities have been discovered in Mozilla Thunderbird, the worst of which could lead to remote code execution.
Status Published
Exploitability 0.5
Weighted Severity 8.0
Risk 4.0
Affected and Fixed Packages Package Details
Weaknesses (1)
CWE-1287 Improper Validation of Specified Type of Input
System Score Found at
cvssv3 6.1 https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2024-5696.json
epss 0.02069 https://api.first.org/data/v1/epss?cve=CVE-2024-5696
epss 0.02069 https://api.first.org/data/v1/epss?cve=CVE-2024-5696
epss 0.02069 https://api.first.org/data/v1/epss?cve=CVE-2024-5696
epss 0.02069 https://api.first.org/data/v1/epss?cve=CVE-2024-5696
epss 0.02069 https://api.first.org/data/v1/epss?cve=CVE-2024-5696
epss 0.02069 https://api.first.org/data/v1/epss?cve=CVE-2024-5696
epss 0.02069 https://api.first.org/data/v1/epss?cve=CVE-2024-5696
epss 0.02069 https://api.first.org/data/v1/epss?cve=CVE-2024-5696
cvssv3.1 8.6 https://bugzilla.mozilla.org/show_bug.cgi?id=1896555
ssvc Track https://bugzilla.mozilla.org/show_bug.cgi?id=1896555
cvssv3.1 8.6 https://lists.debian.org/debian-lts-announce/2024/06/msg00000.html
ssvc Track https://lists.debian.org/debian-lts-announce/2024/06/msg00000.html
cvssv3.1 8.6 https://lists.debian.org/debian-lts-announce/2024/06/msg00010.html
ssvc Track https://lists.debian.org/debian-lts-announce/2024/06/msg00010.html
generic_textual high https://www.mozilla.org/en-US/security/advisories/mfsa2024-25
generic_textual high https://www.mozilla.org/en-US/security/advisories/mfsa2024-26
generic_textual high https://www.mozilla.org/en-US/security/advisories/mfsa2024-28
cvssv3.1 8.6 https://www.mozilla.org/security/advisories/mfsa2024-25/
ssvc Track https://www.mozilla.org/security/advisories/mfsa2024-25/
cvssv3.1 8.6 https://www.mozilla.org/security/advisories/mfsa2024-26/
ssvc Track https://www.mozilla.org/security/advisories/mfsa2024-26/
cvssv3.1 8.6 https://www.mozilla.org/security/advisories/mfsa2024-28/
ssvc Track https://www.mozilla.org/security/advisories/mfsa2024-28/
Reference id Reference type URL
https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2024-5696.json
https://api.first.org/data/v1/epss?cve=CVE-2024-5696
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-5688
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-5690
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-5691
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-5693
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-5696
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-5700
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-5702
2291400 https://bugzilla.redhat.com/show_bug.cgi?id=2291400
GLSA-202408-02 https://security.gentoo.org/glsa/202408-02
GLSA-202412-06 https://security.gentoo.org/glsa/202412-06
GLSA-202412-13 https://security.gentoo.org/glsa/202412-13
mfsa2024-25 https://www.mozilla.org/en-US/security/advisories/mfsa2024-25
mfsa2024-25 https://www.mozilla.org/security/advisories/mfsa2024-25/
mfsa2024-26 https://www.mozilla.org/en-US/security/advisories/mfsa2024-26
mfsa2024-26 https://www.mozilla.org/security/advisories/mfsa2024-26/
mfsa2024-28 https://www.mozilla.org/en-US/security/advisories/mfsa2024-28
mfsa2024-28 https://www.mozilla.org/security/advisories/mfsa2024-28/
msg00000.html https://lists.debian.org/debian-lts-announce/2024/06/msg00000.html
msg00010.html https://lists.debian.org/debian-lts-announce/2024/06/msg00010.html
RHSA-2024:3949 https://access.redhat.com/errata/RHSA-2024:3949
RHSA-2024:3950 https://access.redhat.com/errata/RHSA-2024:3950
RHSA-2024:3951 https://access.redhat.com/errata/RHSA-2024:3951
RHSA-2024:3952 https://access.redhat.com/errata/RHSA-2024:3952
RHSA-2024:3953 https://access.redhat.com/errata/RHSA-2024:3953
RHSA-2024:3954 https://access.redhat.com/errata/RHSA-2024:3954
RHSA-2024:3955 https://access.redhat.com/errata/RHSA-2024:3955
RHSA-2024:3958 https://access.redhat.com/errata/RHSA-2024:3958
RHSA-2024:3972 https://access.redhat.com/errata/RHSA-2024:3972
RHSA-2024:4001 https://access.redhat.com/errata/RHSA-2024:4001
RHSA-2024:4002 https://access.redhat.com/errata/RHSA-2024:4002
RHSA-2024:4003 https://access.redhat.com/errata/RHSA-2024:4003
RHSA-2024:4004 https://access.redhat.com/errata/RHSA-2024:4004
RHSA-2024:4015 https://access.redhat.com/errata/RHSA-2024:4015
RHSA-2024:4016 https://access.redhat.com/errata/RHSA-2024:4016
RHSA-2024:4018 https://access.redhat.com/errata/RHSA-2024:4018
RHSA-2024:4036 https://access.redhat.com/errata/RHSA-2024:4036
RHSA-2024:4063 https://access.redhat.com/errata/RHSA-2024:4063
show_bug.cgi?id=1896555 https://bugzilla.mozilla.org/show_bug.cgi?id=1896555
USN-6840-1 https://usn.ubuntu.com/6840-1/
USN-6862-1 https://usn.ubuntu.com/6862-1/
No exploits are available.
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Found at https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2024-5696.json
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H Found at https://bugzilla.mozilla.org/show_bug.cgi?id=1896555
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2024-06-14T03:55:40Z/ Found at https://bugzilla.mozilla.org/show_bug.cgi?id=1896555
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H Found at https://lists.debian.org/debian-lts-announce/2024/06/msg00000.html
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2024-06-14T03:55:40Z/ Found at https://lists.debian.org/debian-lts-announce/2024/06/msg00000.html
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H Found at https://lists.debian.org/debian-lts-announce/2024/06/msg00010.html
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2024-06-14T03:55:40Z/ Found at https://lists.debian.org/debian-lts-announce/2024/06/msg00010.html
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H Found at https://www.mozilla.org/security/advisories/mfsa2024-25/
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2024-06-14T03:55:40Z/ Found at https://www.mozilla.org/security/advisories/mfsa2024-25/
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H Found at https://www.mozilla.org/security/advisories/mfsa2024-26/
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2024-06-14T03:55:40Z/ Found at https://www.mozilla.org/security/advisories/mfsa2024-26/
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H Found at https://www.mozilla.org/security/advisories/mfsa2024-28/
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2024-06-14T03:55:40Z/ Found at https://www.mozilla.org/security/advisories/mfsa2024-28/
Exploit Prediction Scoring System (EPSS)
Percentile 0.83888
EPSS Score 0.02069
Published At April 2, 2026, 12:55 p.m.
Date Actor Action Source VulnerableCode Version
2026-04-01T13:01:00.805583+00:00 Gentoo Importer Import https://security.gentoo.org/glsa/202412-06 38.0.0