[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$f6KZKt4jEou21e3d7-hmxRKqyO0JYrutUPAAm9I2gblk":3,"g5a-family:mozilla\u002Fthunderbird_esr":232,"g5a-ex:mozilla\u002Fthunderbird_esr@*":233},{"success":4,"data":5},true,{"product":6,"versions":102,"topVulnerabilitiesByEpss":140,"kevVulnerabilities":195,"seoMetadata":210,"meta":229},{"vendorName":7,"productName":8,"versionCount":9,"totalCves":10,"kevCount":11,"lastCveUpdate":12,"versions":13,"description":101},"mozilla","thunderbird_esr",37,228,2,"2018-06-11",[14,19,21,23,25,27,29,32,34,37,40,43,45,47,50,52,54,56,58,60,63,66,68,71,74,77,79,81,83,85,87,89,91,93,95,97,99],{"version":15,"cve_count":16,"kev_count":17,"has_kev":18},"10.0",56,0,false,{"version":20,"cve_count":16,"kev_count":17,"has_kev":18},"10.0.1",{"version":22,"cve_count":17,"kev_count":17,"has_kev":18},"10.0.10",{"version":24,"cve_count":17,"kev_count":17,"has_kev":18},"10.0.11",{"version":26,"cve_count":17,"kev_count":17,"has_kev":18},"10.0.12",{"version":28,"cve_count":16,"kev_count":17,"has_kev":18},"10.0.2",{"version":30,"cve_count":31,"kev_count":17,"has_kev":18},"10.0.3",44,{"version":33,"cve_count":9,"kev_count":17,"has_kev":18},"10.0.4",{"version":35,"cve_count":36,"kev_count":17,"has_kev":18},"10.0.5",24,{"version":38,"cve_count":39,"kev_count":17,"has_kev":18},"10.0.6",10,{"version":41,"cve_count":42,"kev_count":17,"has_kev":18},"10.0.7",1,{"version":44,"cve_count":17,"kev_count":17,"has_kev":18},"10.0.8",{"version":46,"cve_count":17,"kev_count":17,"has_kev":18},"10.0.9",{"version":48,"cve_count":49,"kev_count":17,"has_kev":18},"17.0",53,{"version":51,"cve_count":49,"kev_count":17,"has_kev":18},"17.0.1",{"version":53,"cve_count":11,"kev_count":17,"has_kev":18},"17.0.10",{"version":55,"cve_count":17,"kev_count":17,"has_kev":18},"17.0.11",{"version":57,"cve_count":49,"kev_count":17,"has_kev":18},"17.0.2",{"version":59,"cve_count":49,"kev_count":17,"has_kev":18},"17.0.3",{"version":61,"cve_count":62,"kev_count":17,"has_kev":18},"17.0.4",52,{"version":64,"cve_count":65,"kev_count":17,"has_kev":18},"17.0.5",46,{"version":67,"cve_count":9,"kev_count":17,"has_kev":18},"17.0.6",{"version":69,"cve_count":70,"kev_count":17,"has_kev":18},"17.0.7",28,{"version":72,"cve_count":73,"kev_count":17,"has_kev":18},"17.0.8",19,{"version":75,"cve_count":76,"kev_count":17,"has_kev":18},"17.0.9",13,{"version":78,"cve_count":17,"kev_count":17,"has_kev":18},"45.1.0",{"version":80,"cve_count":17,"kev_count":17,"has_kev":18},"45.1.1",{"version":82,"cve_count":17,"kev_count":17,"has_kev":18},"45.2.0",{"version":84,"cve_count":17,"kev_count":17,"has_kev":18},"45.3.0",{"version":86,"cve_count":17,"kev_count":17,"has_kev":18},"45.4.0",{"version":88,"cve_count":17,"kev_count":17,"has_kev":18},"45.5.0",{"version":90,"cve_count":17,"kev_count":17,"has_kev":18},"45.5.1",{"version":92,"cve_count":17,"kev_count":17,"has_kev":18},"45.6.0",{"version":94,"cve_count":17,"kev_count":17,"has_kev":18},"45.7.0",{"version":96,"cve_count":17,"kev_count":17,"has_kev":18},"45.7.1",{"version":98,"cve_count":17,"kev_count":17,"has_kev":18},"45.8.0",{"version":100,"cve_count":17,"kev_count":17,"has_kev":18},"52.8.0","Thunderbird Esr by Mozilla is a technology product with 37 tracked versions and 228 known security vulnerabilities including 2 CISA Known Exploited Vulnerabilities. Get comprehensive security analysis, vulnerability tracking, and threat intelligence for this product.",[103,104,105,106,107,108,109,110,111,112,113,114,115,116,117,118,119,120,121,122,123,124,125,126,127,128,129,130,131,132,133,134,135,136,137,138,139],{"version":15,"cve_count":16,"kev_count":17,"has_kev":18},{"version":20,"cve_count":16,"kev_count":17,"has_kev":18},{"version":22,"cve_count":17,"kev_count":17,"has_kev":18},{"version":24,"cve_count":17,"kev_count":17,"has_kev":18},{"version":26,"cve_count":17,"kev_count":17,"has_kev":18},{"version":28,"cve_count":16,"kev_count":17,"has_kev":18},{"version":30,"cve_count":31,"kev_count":17,"has_kev":18},{"version":33,"cve_count":9,"kev_count":17,"has_kev":18},{"version":35,"cve_count":36,"kev_count":17,"has_kev":18},{"version":38,"cve_count":39,"kev_count":17,"has_kev":18},{"version":41,"cve_count":42,"kev_count":17,"has_kev":18},{"version":44,"cve_count":17,"kev_count":17,"has_kev":18},{"version":46,"cve_count":17,"kev_count":17,"has_kev":18},{"version":48,"cve_count":49,"kev_count":17,"has_kev":18},{"version":51,"cve_count":49,"kev_count":17,"has_kev":18},{"version":53,"cve_count":11,"kev_count":17,"has_kev":18},{"version":55,"cve_count":17,"kev_count":17,"has_kev":18},{"version":57,"cve_count":49,"kev_count":17,"has_kev":18},{"version":59,"cve_count":49,"kev_count":17,"has_kev":18},{"version":61,"cve_count":62,"kev_count":17,"has_kev":18},{"version":64,"cve_count":65,"kev_count":17,"has_kev":18},{"version":67,"cve_count":9,"kev_count":17,"has_kev":18},{"version":69,"cve_count":70,"kev_count":17,"has_kev":18},{"version":72,"cve_count":73,"kev_count":17,"has_kev":18},{"version":75,"cve_count":76,"kev_count":17,"has_kev":18},{"version":78,"cve_count":17,"kev_count":17,"has_kev":18},{"version":80,"cve_count":17,"kev_count":17,"has_kev":18},{"version":82,"cve_count":17,"kev_count":17,"has_kev":18},{"version":84,"cve_count":17,"kev_count":17,"has_kev":18},{"version":86,"cve_count":17,"kev_count":17,"has_kev":18},{"version":88,"cve_count":17,"kev_count":17,"has_kev":18},{"version":90,"cve_count":17,"kev_count":17,"has_kev":18},{"version":92,"cve_count":17,"kev_count":17,"has_kev":18},{"version":94,"cve_count":17,"kev_count":17,"has_kev":18},{"version":96,"cve_count":17,"kev_count":17,"has_kev":18},{"version":98,"cve_count":17,"kev_count":17,"has_kev":18},{"version":100,"cve_count":17,"kev_count":17,"has_kev":18},[141,149,157,164,168,172,177,182,188,192],{"cveId":142,"description":143,"publishedDate":144,"cvssScore":145,"cvssVersion":146,"severity":147,"isKev":18,"epssScore":148},"CVE-2013-2566","The RC4 algorithm, as used in the TLS protocol and SSL protocol, has many single-byte biases, which makes it easier for remote attackers to conduct plaintext-recovery attacks via statistical analysis of ciphertext in a large number of sessions that use the same plaintext.","2013-03-15",5.9,"v3.1","Medium",0.84424,{"cveId":150,"description":151,"publishedDate":152,"cvssScore":153,"cvssVersion":154,"severity":155,"isKev":18,"epssScore":156},"CVE-2013-0758","Mozilla Firefox before 18.0, Firefox ESR 10.x before 10.0.12 and 17.x before 17.0.2, Thunderbird before 17.0.2, Thunderbird ESR 10.x before 10.0.12 and 17.x before 17.0.2, and SeaMonkey before 2.15 allow remote attackers to execute arbitrary JavaScript code with chrome privileges by leveraging improper interaction between plugin objects and SVG elements.","2013-01-13",9.3,"v2","Critical",0.73364,{"cveId":158,"description":159,"publishedDate":160,"cvssScore":161,"cvssVersion":146,"severity":162,"isKev":4,"epssScore":163},"CVE-2013-1690","Mozilla Firefox before 22.0, Firefox ESR 17.x before 17.0.7, Thunderbird before 17.0.7, and Thunderbird ESR 17.x before 17.0.7 do not properly handle onreadystatechange events in conjunction with page reloading, which allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted web site that triggers an attempt to execute data at an unmapped memory location.","2013-06-26",8.8,"High",0.69021,{"cveId":165,"description":166,"publishedDate":152,"cvssScore":153,"cvssVersion":154,"severity":155,"isKev":18,"epssScore":167},"CVE-2013-0757","The Chrome Object Wrapper (COW) implementation in Mozilla Firefox before 18.0, Firefox ESR 17.x before 17.0.2, Thunderbird before 17.0.2, Thunderbird ESR 17.x before 17.0.2, and SeaMonkey before 2.15 does not prevent modifications to the prototype of an object, which allows remote attackers to execute arbitrary JavaScript code with chrome privileges by referencing Object.prototype.__proto__ in a crafted HTML document.",0.60859,{"cveId":169,"description":170,"publishedDate":152,"cvssScore":153,"cvssVersion":154,"severity":155,"isKev":18,"epssScore":171},"CVE-2013-0753","Use-after-free vulnerability in the serializeToStream implementation in the XMLSerializer component in Mozilla Firefox before 18.0, Firefox ESR 10.x before 10.0.12 and 17.x before 17.0.2, Thunderbird before 17.0.2, Thunderbird ESR 10.x before 10.0.12 and 17.x before 17.0.2, and SeaMonkey before 2.15 allows remote attackers to execute arbitrary code via crafted web content.",0.51324,{"cveId":173,"description":174,"publishedDate":175,"cvssScore":153,"cvssVersion":154,"severity":155,"isKev":18,"epssScore":176},"CVE-2012-3993","The Chrome Object Wrapper (COW) implementation in Mozilla Firefox before 16.0, Firefox ESR 10.x before 10.0.8, Thunderbird before 16.0, Thunderbird ESR 10.x before 10.0.8, and SeaMonkey before 2.13 does not properly interact with failures of InstallTrigger methods, which allows remote attackers to execute arbitrary JavaScript code with chrome privileges via a crafted web site, related to an \"XrayWrapper pollution\" issue.","2012-10-10",0.42609,{"cveId":178,"description":179,"publishedDate":180,"cvssScore":39,"cvssVersion":154,"severity":155,"isKev":18,"epssScore":181},"CVE-2013-1710","The crypto.generateCRMFRequest function in Mozilla Firefox before 23.0, Firefox ESR 17.x before 17.0.8, Thunderbird before 17.0.8, Thunderbird ESR 17.x before 17.0.8, and SeaMonkey before 2.20 allows remote attackers to execute arbitrary JavaScript code or conduct cross-site scripting (XSS) attacks via vectors related to Certificate Request Message Format (CRMF) request generation.","2013-08-07",0.40118,{"cveId":183,"description":184,"publishedDate":12,"cvssScore":185,"cvssVersion":186,"severity":155,"isKev":18,"epssScore":187},"CVE-2018-5159","An integer overflow can occur in the Skia library due to 32-bit integer use in an array without integer overflow checks, resulting in possible out-of-bounds writes. This could lead to a potentially exploitable crash triggerable by web content. This vulnerability affects Thunderbird \u003C 52.8, Thunderbird ESR \u003C 52.8, Firefox \u003C 60, and Firefox ESR \u003C 52.8.",9.8,"v3.0",0.21036,{"cveId":189,"description":190,"publishedDate":175,"cvssScore":153,"cvssVersion":154,"severity":155,"isKev":18,"epssScore":191},"CVE-2012-4188","Heap-based buffer overflow in the Convolve3x3 function in Mozilla Firefox before 16.0, Firefox ESR 10.x before 10.0.8, Thunderbird before 16.0, Thunderbird ESR 10.x before 10.0.8, and SeaMonkey before 2.13 allows remote attackers to execute arbitrary code via unspecified vectors.",0.147,{"cveId":193,"description":194,"publishedDate":175,"cvssScore":153,"cvssVersion":154,"severity":155,"isKev":18,"epssScore":191},"CVE-2012-4186","Heap-based buffer overflow in the nsWaveReader::DecodeAudioData function in Mozilla Firefox before 16.0, Firefox ESR 10.x before 10.0.8, Thunderbird before 16.0, Thunderbird ESR 10.x before 10.0.8, and SeaMonkey before 2.13 allows remote attackers to execute arbitrary code via unspecified vectors.",[196,201],{"cveId":158,"description":159,"publishedDate":160,"cvssScore":161,"severity":162,"isKev":4,"epssScore":163,"cisaVulnName":197,"cisaDateAdded":198,"cisaShortDescription":199,"cisaRequiredAction":200},"Mozilla Firefox and Thunderbird Denial-of-Service Vulnerability","2022-03-28","Mozilla Firefox and Thunderbird do not properly handle onreadystatechange events in conjunction with page reloading, which allows remote attackers to cause a denial-of-service (DoS) or possibly execute malicious code via a crafted web site.","Apply updates per vendor instructions.",{"cveId":202,"description":203,"publishedDate":204,"cvssScore":205,"severity":147,"isKev":4,"epssScore":206,"cisaVulnName":207,"cisaDateAdded":208,"cisaShortDescription":209,"cisaRequiredAction":200},"CVE-2013-1675","Mozilla Firefox before 21.0, Firefox ESR 17.x before 17.0.6, Thunderbird before 17.0.6, and Thunderbird ESR 17.x before 17.0.6 do not properly initialize data structures for the nsDOMSVGZoomEvent::mPreviousScale and nsDOMSVGZoomEvent::mNewScale functions, which allows remote attackers to obtain sensitive information from process memory via a crafted web site.","2013-05-16",6.5,0.06696,"Mozilla Firefox Information Disclosure Vulnerability","2022-03-03","Mozilla Firefox does not properly initialize data structures for the nsDOMSVGZoomEvent::mPreviousScale and nsDOMSVGZoomEvent::mNewScale functions, which allows remote attackers to obtain sensitive information from process memory via a crafted web site.",{"title":211,"metaDescription":212,"keywords":213,"structuredData":214},"Thunderbird Esr by Mozilla - Security Vulnerabilities & Analysis | Precursor Intelligence","Comprehensive security analysis for Thunderbird Esr by Mozilla covering 37 versions with 228 tracked vulnerabilities including 0 critical and 1 high-severity issues and 2 CISA KEV vulnerabilities. Real-time threat intelligence, CVE tracking, and security recommendations.","Thunderbird Esr vulnerabilities, Thunderbird Esr security, Thunderbird Esr CVE, Mozilla Thunderbird Esr, Thunderbird Esr threat intelligence, Mozilla security, product security analysis, cybersecurity threats, vulnerability management, CVE tracking, Thunderbird Esr KEV, Thunderbird Esr exploited vulnerabilities",{"@context":215,"@type":216,"name":217,"description":212,"url":218,"manufacturer":219,"applicationCategory":223,"softwareVersion":224,"mainEntity":225},"https:\u002F\u002Fschema.org","SoftwareApplication","Thunderbird Esr","https:\u002F\u002Fprecursorintelligence.com\u002Fvulnerabilities\u002Ftechnologies\u002Fvendors\u002Fmozilla\u002Fthunderbird_esr",{"@type":220,"name":221,"url":222},"Organization","Mozilla","https:\u002F\u002Fprecursorintelligence.com\u002Fvendors\u002Fmozilla","Security Software","37 versions tracked",{"@type":226,"name":227,"description":228,"vulnerabilityCount":10,"dateModified":12},"SecurityVulnerability","Thunderbird Esr Security Vulnerabilities","Security vulnerabilities affecting Thunderbird Esr by Mozilla",{"totalVersions":9,"totalVulnerabilities":10,"kevVulnerabilities":11,"lastUpdated":12,"generatedAt":230,"apiVersion":231},"2026-10-17T18:19:33.139Z","3.0",[],{"rows":234,"total":11,"capped":18,"failed":17},[235,240],{"cveId":158,"name":197,"severity":162,"cvss":161,"added":198,"epss":163,"published":236,"ranges":237,"checked":4,"hits":239,"covers":18},"2013-06-26T03:19:10.793",[238],"17.0 to before 17.0.7",[],{"cveId":202,"name":207,"severity":147,"cvss":205,"added":208,"epss":206,"published":241,"ranges":242,"checked":4,"hits":244,"covers":18},"2013-05-16T11:45:30.877",[243],"17.0 to before 17.0.6",[]]