mozilla thunderbird

Name: mozilla thunderbird
Brand: mozilla

productUS

cpe:2.3:a:mozilla:thunderbird:*:*:*:*:*:*:*:*

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

by severity

231critical707high508medium25low

updated 2026-10-27

vulnerabilities (2,073)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2023-4863US	high8.8OT critical	100.0% (100th)	KEV	115.2.2	2023-09-12	2 versions
CVE-2016-9079US	high7.5OT critical	87.4% (100th)	KEV	45.5.1	2018-06-11	< 45.5.1
CVE-2010-3765US	high9.3OT critical	83.2% (100th)	KEV	no fix	2010-10-28	14 versions
CVE-2013-1690US	high8.8OT critical	69.0% (99th)	KEV	17.0.7	2013-06-26	< 17.0.7
CVE-2019-11708US	critical10.0OT critical	55.9% (99th)	KEV	60.7.2	2019-07-23	< 60.7.2
CVE-2019-17026US	high8.8OT critical	46.3% (99th)	KEV	68.4.1	2020-03-02	< 68.4.1
CVE-2019-11707US	high8.8OT critical	38.0% (99th)	KEV	60.7.2	2019-07-23	< 60.7.2
CVE-2024-9680US	critical9.8OT critical	23.2% (98th)	KEV	115.16.0	2024-10-09	3 versions
CVE-2022-26485US	high8.8OT critical	14.3% (97th)	KEV	91.6.2	2022-12-22	< 91.6.2
CVE-2023-5217US	high8.8OT critical	49.0% (99th)	KEV	115.3.1	2023-09-28	< 115.3.1
CVE-2020-6820US	high8.1OT critical	7.06% (94th)	KEV	68.7.0	2020-04-24	< 68.7.0
CVE-2013-1675US	medium6.5OT critical	6.70% (94th)	KEV	17.0.6	2013-05-16	< 17.0.6
CVE-2020-6819US	high8.1OT critical	3.04% (87th)	KEV	68.7.0	2020-04-24	< 68.7.0
CVE-2022-26486US	critical9.6OT critical	2.36% (84th)	KEV	91.6.2	2022-12-22	< 91.6.2
CVE-2015-4000US	low3.7OT high	99.9% (100th)	Exploit	no fix	2015-05-21	2 versions
CVE-2013-2566US	medium5.9OT high	84.4% (100th)	Exploit	24.1.1	2013-03-15	< 24.1.1
CVE-2014-1511US	critical9.8	83.5% (100th)	Exploit	24.4	2014-03-19	< 24.4
CVE-2014-1510US	critical9.8	82.2% (100th)	Exploit	24.4	2014-03-19	< 24.4
CVE-2011-2371US	high10.0	75.7% (100th)	Exploit	no fix	2011-06-30	83 versions
CVE-2013-0758US	high9.3	73.4% (99th)	Exploit	17.0.2	2013-01-13	< 17.0.2
CVE-2006-0295US	medium5.1	71.3% (99th)	Exploit	no fix	2006-02-02	= 1.5
CVE-2024-4367US	high8.8	70.7% (99th)	Exploit	115.11.0	2024-05-14	2 versions
CVE-2011-3658US	high7.5	70.3% (99th)	Exploit	no fix	2011-12-21	= 8.0
CVE-2015-0816US	medium5.0	65.5% (99th)	Exploit	no fix	2015-04-01	≤ 31.5
CVE-2013-0757US	high9.3	60.9% (99th)	Exploit	17.0.2	2013-01-13	< 17.0.2
CVE-2013-0753US	high9.3	51.3% (99th)	Exploit	17.0.2	2013-01-13	< 17.0.2
CVE-2010-1205US	critical9.8	43.4% (99th)	Exploit	3.0.6	2010-06-30	2 versions
CVE-2012-3993US	high9.3	42.6% (99th)	Exploit	no fix	2012-10-10	105 versions
CVE-2020-26950US	high8.8	42.3% (99th)	Exploit	78.4.2	2020-12-09	< 78.4.2
CVE-2013-1710US	high10.0	41.7% (99th)	Exploit	no fix	2013-08-07	8 versions
CVE-2011-3659US	high9.3	36.8% (98th)	Exploit	3.1.18	2012-02-01	2 versions
CVE-2017-5375US	critical9.8	34.1% (98th)	Exploit	45.7.0	2018-06-11	< 45.7.0
CVE-2016-1960US	high8.8	30.9% (98th)	Exploit	no fix	2016-03-13	≤ 38.6.0
CVE-2022-1802US	high8.8	28.5% (98th)	Exploit	91.9.1	2022-12-22	< 91.9.1
CVE-2019-9810US	high8.8	27.2% (98th)	Exploit	60.6.1	2019-04-26	< 60.6.1
CVE-2010-3131US	high9.3	22.9% (98th)	Exploit	no fix	2010-08-26	68 versions
CVE-2016-9899US	critical9.8	20.8% (98th)	Exploit	52.1.0	2018-06-11	< 52.1.0
CVE-2018-5159US	critical9.8	20.6% (98th)	Exploit	52.8.0	2018-06-11	< 52.8.0
CVE-2019-9791US	critical9.8	19.9% (97th)	Exploit	60.6.0	2019-04-26	< 60.6.0
CVE-2017-5465US	critical9.1	18.2% (97th)	Exploit	52.1.0	2018-06-11	< 52.1.0
CVE-2017-5447US	critical9.1	17.0% (97th)	Exploit	52.1.0	2018-06-11	< 52.1.0
CVE-2017-5404US	critical9.8	16.9% (97th)	Exploit	45.8.0	2018-06-11	< 45.8.0
CVE-2019-9792US	critical9.8	13.3% (96th)	Exploit	60.6.0	2019-04-26	< 60.6.0
CVE-2009-2464US	high10.0	13.2% (96th)	Exploit	no fix	2009-07-22	21 versions
CVE-2018-18500US	critical9.8	12.7% (96th)	Exploit	60.5	2019-02-05	< 60.5
CVE-2016-9066US	high7.5	12.0% (96th)	Exploit	45.5.0	2018-06-11	< 45.5.0
CVE-2013-1670US	medium4.3	12.0% (96th)	Exploit	no fix	2013-05-16	6 versions
CVE-2018-5146US	high8.8	11.9% (96th)	Exploit	52.7.0	2018-06-11	< 52.7.0
CVE-2010-1199US	high9.3	11.4% (96th)	Exploit	no fix	2010-06-24	42 versions
CVE-2019-11704US	critical9.8	10.5% (96th)	Exploit	60.7.1	2019-07-23	< 60.7.1

showing 50 of 2,073

weaknesses (8)

The flaw types (CWEs) most of these CVEs share.

CWE-119Improper Restriction of Operations within the Bounds of a Memory Buffer449 CVEs
CWE-416Use After Free358 CVEs
CWE-20Improper Input Validation201 CVEs
CWE-787Out-of-bounds Write162 CVEs
CWE-200Exposure of Sensitive Information to an Unauthorized Actor142 CVEs
CWE-120Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')134 CVEs
CWE-399CWE-39983 CVEs
CWE-264CWE-26482 CVEs

sources (2)

Which sources assert this record, and when.

USNVD / CVE2,068 CVEs
NLNCSC-NL (CSAF)65 CVEs

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan