mozilla thunderbird esr
productUScpe:2.3:a:mozilla:thunderbird_esr:*:*:*:*:*:*:*:*
A product tracked in the threat graph; the vulnerabilities below are known to affect it.
by severity
6critical154high67medium1low
updated 2026-10-28
01
vulnerabilities (235)
Related CVEs.
showing 50 of 235
02
weaknesses (8)
The flaw types (CWEs) most of these CVEs share.
- CWE-119Improper Restriction of Operations within the Bounds of a Memory Buffer63 CVEs
- CWE-416Use After Free54 CVEs
- CWE-20Improper Input Validation34 CVEs
- CWE-399CWE-39924 CVEs
- CWE-79Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')22 CVEs
- CWE-264CWE-26420 CVEs
- CWE-787Out-of-bounds Write14 CVEs
- CWE-125Out-of-bounds Read13 CVEs
03
sources (2)
Which sources assert this record, and when.
- USNVD / CVE228 CVEs
- NLNCSC-NL (CSAF)7 CVEs
scry
Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.
Free scan