High 2 exploited CVEs DSA-4656-1 5 CVEs

thunderbird - security update

Published Apr 13, 2020 · Updated Mar 9, 2026

Ecosystem: Debian

Fixed packages 2

Release	Package	Fixed in
Debian · 10	thunderbird	1:68.7.0-1~deb10u1
Debian · 9	thunderbird	1:68.7.0-1~deb9u1

Vulnerabilities 5

High 8.1

CVE-2020-6819 Exploited

Under certain conditions, when running the nsDocShell destructor, a race condition can cause a use-after-free. We are a…

Mozilla Firefox Thunderbird Firefox ESR Browsers Debian Ubuntu Alpine

Apr 24, 2020
KEV Nov 3, 2021
High 8.1

CVE-2020-6820 Exploited

Under certain conditions, when handling a ReadableStream, a race condition can cause a use-after-free. We are aware of …

Mozilla Firefox Thunderbird Firefox ESR Browsers Debian Ubuntu Alpine

Apr 24, 2020
KEV Nov 3, 2021
Unscored —

CVE-2020-6821

When reading from areas partially or fully outside the source resource with WebGL's <code>copyTexSubImage</code> method…

Mozilla Firefox Thunderbird Firefox ESR Browsers Debian Ubuntu Alpine

Apr 24, 2020
Unscored —

CVE-2020-6822

On 32-bit builds, an out of bounds write could have occurred when processing an image larger than 4 GB in <code>GMPDeco…

Mozilla Firefox Thunderbird Firefox ESR Browsers Debian Ubuntu Alpine

Apr 24, 2020
Unscored —

CVE-2020-6825

Mozilla developers and community members Tyson Smith and Christian Holler reported memory safety bugs present in Firefo…

Mozilla Firefox Thunderbird Firefox ESR Browsers Debian Ubuntu Alpine

Apr 24, 2020