thunderbird-0:91.3.0-2.el7_9.src as a component of Red Hat Enterprise Linux Server Optional (v. 7)

productUS

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

KEV-listed

public exploit

EPSS ≥ 10%

by severity

2critical3high4medium0low

updated 2026-10-28

vulnerabilities (9)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2021-38503US	critical10.0OT elevated	4.12% (91st)	—	no fix	2021-12-08	—
CVE-2021-38504US	high8.8	1.77% (78th)	—	no fix	2021-12-08	—
CVE-2021-38509US	medium4.3	1.76% (78th)	—	no fix	2021-12-08	—
CVE-2021-38508US	medium4.3	1.64% (76th)	—	no fix	2021-12-08	—
CVE-2021-38506US	medium4.3	1.51% (74th)	—	no fix	2021-12-08	—
CVE-2021-43534US	high8.8	1.25% (69th)	—	no fix	2021-12-08	—
CVE-2021-43535US	high8.8	1.15% (67th)	—	no fix	2021-12-08	—
CVE-2021-38507US	medium6.5	0.83% (57th)	—	no fix	2021-12-08	—
CVE-2021-43529US	critical9.8	0.47% (40th)	—	no fix	2023-02-16	—

The flaw types (CWEs) most of these CVEs share.

CWE-1021Improper Restriction of Rendered UI Layers or Frames3 CVEs
CWE-120Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')2 CVEs
CWE-254CWE-2542 CVEs
CWE-416Use After Free2 CVEs
CWE-787Out-of-bounds Write2 CVEs
CWE-346Origin Validation Error1 CVEs
CWE-357Insufficient UI Warning of Dangerous Operations1 CVEs
CWE-732Incorrect Permission Assignment for Critical Resource1 CVEs

Which sources assert this record, and when.

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.