rhel10/thunderbird-flatpak

Direct Vulnerabilities

Known vulnerabilities in the rhel10/thunderbird-flatpak package. This does not include vulnerabilities belonging to this package’s dependencies.

Fix vulnerabilities automatically

Snyk's AI Trust Platform automatically finds the best upgrade path and integrates with your development workflows. Secure your code at zero cost.

Fix for free

Vulnerability	Vulnerable Version
H CVE-2026-7323	*
H Arbitrary Code Injection	*
H Incorrect Privilege Assignment	*
M Access of Resource Using Incompatible Type ('Type Confusion')	*
M Out-of-Bounds	*
H Improper Check for Unusual or Exceptional Conditions	*
M Arbitrary Command Injection	*
H Arbitrary Code Injection	*
M OS Command Injection	*
H Use After Free	*
M Origin Validation Error	*
M Cross-site Scripting (XSS)	*
M Expired Pointer Dereference	*
M Origin Validation Error	*
M Trust Boundary Violation	*
H Race Condition	*
L Authentication Bypass	*
H Out-of-bounds Write	*
M Cross-site Scripting (XSS)	*
M Expired Pointer Dereference	*
M Interpretation Conflict	*
H Out-of-bounds Write	*
H Use After Free	*
H Out-of-Bounds	*
H Improper Access Control	*
H Out-of-Bounds	*
H Exposure of System Data to an Unauthorized Control Sphere	*
M Out-of-bounds Read	*
M Integer Overflow or Wraparound	*
M Overly Permissive Cross-domain Whitelist	*
H Access of Uninitialized Pointer	*
H Out-of-Bounds	*
L Information Exposure	*
H Use After Free	*
H Out-of-Bounds	*
M Improper Initialization	*
H Out-of-Bounds	*
H Information Exposure	*
M Arbitrary Code Injection	*
M Incorrect Default Permissions	*
M Cross-site Scripting (XSS)	*
H Out-of-Bounds	*
M Protection Mechanism Failure	*
H Use of Uninitialized Variable	*
L NULL Pointer Dereference	*
H Insufficient Protection Against Instruction Skipping Via Fault Injection	*
H Out-of-Bounds	*
M Information Exposure	*
M Cross-site Scripting (XSS)	*
H Use After Free	*
M Use of Incorrectly-Resolved Name or Reference	*
H Double Free	*
H Resource Exhaustion	*
H Authentication Bypass	*
L Authentication Bypass	*
H Authentication Bypass	*
H Information Exposure	*
H Out-of-bounds Write	*
H Out-of-bounds Write	*
L Improper Restriction of Rendered UI Layers or Frames	*
M Out-of-Bounds	*
M Inclusion of Functionality from Untrusted Control Sphere	*
M Inclusion of Functionality from Untrusted Control Sphere	*
M Improper Encoding or Escaping of Output	*
M Out-of-Bounds	*

Vulnerability

Vulnerable Version

CVE-2026-7323