Debian/thunderbird: high 7.1
Sandbox escape due to uninitialized memory in the Graphics component. This vulnerability was fixed in Firefox 158, Firefox ESR 115.43, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5.
Action: Upgrade thunderbird to 1:153.5.1esr-1~deb13u1 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 1:153.5.1esr-1~deb13u1 | - |
Fixed versions
| 1:153.5.1esr-1~deb13u1 |
Sources
- osv: DEBIAN-CVE-2026-109712#Debian:13/thunderbird
- https://security-tracker.debian.org/tracker/CVE-2026-109712
published · modified · JSON