Debian/thunderbird: high 7.1
Sandbox escape due to uninitialized memory in the Graphics component. This vulnerability was fixed in Firefox 158, Firefox ESR 115.43, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5.
Action: Upgrade thunderbird to 1:153.5.0esr-1 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 1:153.5.0esr-1 | - |
Fixed versions
| 1:153.5.0esr-1 |
Sources
- osv: DEBIAN-CVE-2026-109712#Debian:14/thunderbird
- https://security-tracker.debian.org/tracker/CVE-2026-109712
published · modified · JSON