T
Thunderbird
Security Risk Profile
54
/100
mediumSecurity Risk Score
Comprehensive risk assessment based on 56 vulnerabilities, EPSS scores, exploitation status, and remediation availability.
📅 Data spans from September 12, 2016 to present
56
Total CVEs
25
Critical+High
0
Exploited
0
Unpatched
Threat Assessment
Avg CVSS
6.8
Base severity
Avg EPSS
0%
Exploit probability
Unpatched
0
Critical/High
Risk Level
54/100
medium
Severity Distribution
Critical
6High
19Medium
29Low
1Exploit Likelihood
>50% chance
020-50%
05-20%
0<5%
0Age Distribution
Common Weaknesses (CWE)
1
Infoleak
5
2
Input Validation
4
3
Buffer Overflow
4
4
Null Pointer Dereference
2
5
Use After Free
2
Most Affected Products
1. alpine/thunderbird160
2. Mozilla Thunderbird104
3. debian/thunderbird62
4. Canonical Ubuntu Linux53
5. alpine/element-web42
Recent Vulnerabilities
See more →https://www.bleepingcomputer.com/news/security/lastpass-fake-password-managers-infect-mac-users-with-malware/
unknown
LastPass: Fake password managers infect Mac users with malware
Sep 22, 2025🔧 No Patch
CVE-2022-45414
CVSS 8.1high
Nov 30, 2022
CVE-2022-39249
CVSS 7.5high
Matrix Javascript SDK vulnerable to impersonation via forwarded Megolm sessions
Sep 28, 2022
CVE-2022-39250
CVSS 8.6high
Matrix JavaScript SDK vulnerable to key/device identifier confusion in SAS verification
Sep 28, 2022
CVE-2022-39251
CVSS 8.6high
Matrix Javascript SDK vulnerable to Olm/Megolm protocol confusion
Sep 28, 2022
CVE-2022-39236
CVSS 5.3medium
Matrix Javascript SDK improper beacon events can cause availability issues
Sep 28, 2022
CVE-2022-3155
CVSS 7.8high
Sep 20, 2022
CVE-2022-36059
CVSS 8.2high
Prototype pollution in matrix-js-sdk
Aug 31, 2022
CVE-2022-1834
CVSS 6.5medium
May 31, 2022
CVE-2022-1529
CVSS 8.8high
May 20, 2022
Monitor Thunderbird in Real-Time
Get instant alerts when new vulnerabilities are discovered. Stay ahead of security threats with SecAlerts.