Thunderbird
Security Risk Profile
52
/100
mediumSecurity Risk Score
Comprehensive risk assessment based on 56 vulnerabilities, EPSS scores, exploitation status, and remediation availability.
📅 Data spans from September 12, 2016 to present
56
Total CVEs
25
Critical+High
0
Exploited
0
Unpatched
Threat Assessment
Avg CVSS
6.8
Base severity
Avg EPSS
0%
Exploit probability
Unpatched
0
Critical/High
Risk Level
52/100
medium
Severity Distribution
Critical
7High
18Medium
29Low
1Exploit Likelihood
>50% chance
020-50%
05-20%
0<5%
0Age Distribution
Common Weaknesses (CWE)
1
Infoleak
5
2
Input Validation
4
3
Buffer Overflow
4
4
Null Pointer Dereference
2
5
Use After Free
2
Most Affected Products
1. Mozilla Thunderbird104
2. Canonical Ubuntu Linux47
3. Debian Debian Linux42
4. debian/thunderbird34
5. redhat Enterprise Linux Desktop26
Recent Vulnerabilities
See more →https://www.bleepingcomputer.com/news/security/lastpass-fake-password-managers-infect-mac-users-with-malware/
unknown
LastPass: Fake password managers infect Mac users with malware
9/22/2025🔧 No Patch
CVE-2022-45414
CVSS 8.1high
11/30/2022
CVE-2022-39249
CVSS 7.5high
Matrix Javascript SDK vulnerable to impersonation via forwarded Megolm sessions
9/28/2022
CVE-2022-39250
CVSS 8.6high
Matrix JavaScript SDK vulnerable to key/device identifier confusion in SAS verification
9/28/2022
CVE-2022-39251
CVSS 8.6high
Matrix Javascript SDK vulnerable to Olm/Megolm protocol confusion
9/28/2022
CVE-2022-39236
CVSS 5.3medium
Matrix Javascript SDK improper beacon events can cause availability issues
9/28/2022
CVE-2022-3155
CVSS 7.8high
9/20/2022
CVE-2022-36059
CVSS 8.2high
Prototype pollution in matrix-js-sdk
8/31/2022
CVE-2022-1834
CVSS 6.5medium
5/31/2022
CVE-2022-1529
CVSS 8.8high
5/20/2022
Monitor Thunderbird in Real-Time
Get instant alerts when new vulnerabilities are discovered. Stay ahead of security threats with SecAlerts.