9.8 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
7.5 High
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
0.01 Low
EPSS
Percentile
83.1%
05/05/2020
Critical
Multiple vulnerabilities were found in Mozilla Thunderbird. Malicious users can exploit these vulnerabilities to obtain sensitive information, bypass security restrictions, execute arbitrary code, cause denial of service, spoof user interface.
Mozilla Thunderbird earlier then 68.8
Update to the latest version
Download Thunderbird
ACE
CVE-2020-68317.5Critical
CVE-2020-123876.8High
CVE-2020-123934.6Warning
CVE-2020-123922.1Warning
CVE-2020-123974.3Warning
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-12387
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-12392
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-12393
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-12397
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-6831
statistics.securelist.com/vulnerability-scan/month
threats.kaspersky.com/en/product/Mozilla-Thunderbird/
www.mozilla.org/en-US/security/advisories/mfsa2020-18/
www.mozilla.org/en-US/thunderbird/
9.8 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
7.5 High
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
0.01 Low
EPSS
Percentile
83.1%