Every CVE Search/ Get API key

CVE-2018-5146

An out of bounds memory write while processing Vorbis audio data was reported through the Pwn2Own...

8.8 HighPublic exploitFix available

An out of bounds memory write while processing Vorbis audio data was reported through the Pwn2Own contest. This vulnerability affects Firefox < 59.0.1, Firefox ESR < 52.7.2, and Thunderbird < 52.7.

Attack profile

How easy it is to exploit

Attack vector
Network
Complexity
Low
Privileges needed
None
User interaction
Required

What an attacker can affect

Confidentiality
High
Integrity
High
Availability
High

Exploit likelihood

11.9%Up 7.6 points since Apr 14, 2021
90%50%10%1%

What each source reports

NVD Score used 8.8

An out of bounds memory write while processing Vorbis audio data was reported through the Pwn2Own contest. This vulnerability affects Firefox < 59.0.1, Firefox ESR < 52.7.2, and Thunderbird < 52.7.

Record
CVE-2018-5146
CVSS 3.0
8.8 HighCVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
CVSS 2.0
6.8 MediumAV:N/AC:M/Au:N/C:P/I:P/A:P
Weakness
CWE-787
Updated
2026-11-02
CVE List No score

An out of bounds memory write while processing Vorbis audio data was reported through the Pwn2Own contest. This vulnerability affects Firefox < 59.0.1, Firefox ESR < 52.7.2, and Thunderbird < 52.7.

Record
CVE-2018-5146
Updated
2026-11-02
EUVDEUVD-2018-16932 No score

An out of bounds memory write while processing Vorbis audio data was reported through the Pwn2Own contest. This vulnerability affects Firefox < 59.0.1, Firefox ESR < 52.7.2, and Thunderbird < 52.7.

Record
EUVD-2018-16932
Updated
2026-11-03
GitHub AdvisoriesGHSA-qxgw-7whg-72j2 8.8

An out of bounds memory write while processing Vorbis audio data was reported through the Pwn2Own...

An out of bounds memory write while processing Vorbis audio data was reported through the Pwn2Own contest. This vulnerability affects Firefox < 59.0.1, Firefox ESR < 52.7.2, and Thunderbird < 52.7.

Record
GHSA-qxgw-7whg-72j2
CVSS 3.0
8.8 HighCVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Weakness
CWE-787
Updated
2026-11-02
OSVALPINE-CVE-2018-5146 8.8

An out of bounds memory write while processing Vorbis audio data was reported through the Pwn2Own contest. This vulnerability affects Firefox < 59.0.1, Firefox ESR < 52.7.2, and Thunderbird < 52.7.

Record
ALPINE-CVE-2018-5146
CVSS 3.0
8.8 HighCVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVBELL-CVE-2018-5146 8.8

CVE-2018-5146 does not affect BellSoft software

Record
BELL-CVE-2018-5146
CVSS 3.0
8.8 HighCVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Updated
2026-11-02
Show 24 moreShow less
OSV 8.8

An out of bounds memory write while processing Vorbis audio data was reported through the Pwn2Own contest. This vulnerability affects Firefox < 59.0.1, Firefox ESR < 52.7.2, and Thunderbird < 52.7.

Record
CVE-2018-5146
CVSS 3.0
8.8 HighCVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVDEBIAN-CVE-2018-5146 8.8

An out of bounds memory write while processing Vorbis audio data was reported through the Pwn2Own contest. This vulnerability affects Firefox < 59.0.1, Firefox ESR < 52.7.2, and Thunderbird < 52.7.

Record
DEBIAN-CVE-2018-5146
CVSS 3.0
8.8 HighCVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2018:0549 8.8

Red Hat Security Advisory: firefox security update

Record
RHSA-2018:0549
CVSS 3.0
8.8 HighCVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2018:0647 9.8

Red Hat Security Advisory: thunderbird security update

Record
RHSA-2018:0647
CVSS 3.0
9.8 CriticalCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2018:0648 9.8

Red Hat Security Advisory: thunderbird security update

Record
RHSA-2018:0648
CVSS 3.0
9.8 CriticalCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2018:0649 7.8

Red Hat Security Advisory: libvorbis security update

Record
RHSA-2018:0649
CVSS 3.0
7.8 HighCVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2018:1058 7.8

Red Hat Security Advisory: libvorbis security update

Record
RHSA-2018:1058
CVSS 3.0
7.8 HighCVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVUBUNTU-CVE-2018-5146 8.8

An out of bounds memory write while processing Vorbis audio data was reported through the Pwn2Own contest. This vulnerability affects Firefox < 59.0.1, Firefox ESR < 52.7.2, and Thunderbird < 52.7.

Record
UBUNTU-CVE-2018-5146
CVSS 3.0
8.8 HighCVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVMGASA-2018-0179 No score

Updated libvorbis packages fix security vulnerability

libvorbis can write out of bounds on codebook decoding when processing malformed Vorbis audio data (CVE-2018-5146).

Record
MGASA-2018-0179
Updated
2026-11-02
OSVMGASA-2018-0203 No score

Updated thunderbird packages fix security vulnerability

  • A buffer overflow can occur when manipulating the SVG animatedPathSegList through script. This results in a potentially exploitable crash (CVE-2018-5127).
  • A lack of parameter validation on IPC messages results in a potential out-of-bounds write through malformed IPC messages. This can potentially allow for sandbox escape through memory corruption in the parent process (CVE-2018-5129).
  • An integer overflow can occur during conversion of text to some Unicode character sets due to an unchecked length parameter (CVE-2018-5144).
  • An out of bounds memory write while processing Vorbis audio data was reported through the Pwn2Own contest (CVE-2018-5146).
  • Mozilla developers and community members reported memory safety bugs present in Firefox 58, Firefox ESR 52.6, and Thunderbird 52.6. Some of these bugs showed evidence of memory corruption and we presume that with enough effort that some of these could be exploited to run arbitrary code (CVE-2018-5125).
  • Mozilla developers reported memory safety bugs present in Firefox ESR 52.6 and Thunderbird 52.6. These bugs showed evidence of memory corruption and we presume that with enough effort that some of these could be exploited to run arbitrary code (CVE-2018-5145).
Record
MGASA-2018-0203
Updated
2026-11-02
OSVMGASA-2018-0207 No score

Updated thunderbird packages fix bugs and security vulnerabilities

  • A buffer overflow can occur when manipulating the SVG animatedPathSegList through script. This results in a potentially exploitable crash (CVE-2018-5127).
  • A lack of parameter validation on IPC messages results in a potential out-of-bounds write through malformed IPC messages. This can potentially allow for sandbox escape through memory corruption in the parent process (CVE-2018-5129).
  • An integer overflow can occur during conversion of text to some Unicode character sets due to an unchecked length parameter (CVE-2018-5144).
  • An out of bounds memory write while processing Vorbis audio data was reported through the Pwn2Own contest (CVE-2018-5146).
  • Mozilla developers and community members reported memory safety bugs present in Firefox 58, Firefox ESR 52.6, and Thunderbird 52.6. Some of these bugs showed evidence of memory corruption and we presume that with enough effort that some of these could be exploited to run arbitrary code (CVE-2018-5125).
  • Mozilla developers reported memory safety bugs present in Firefox ESR 52.6 and Thunderbird 52.6. These bugs showed evidence of memory corruption and we presume that with enough effort that some of these could be exploited to run arbitrary code (CVE-2018-5145).
Record
MGASA-2018-0207
Updated
2026-11-02
OSVopenSUSE-SU-2018:0818-1 No score

Security update for Mozilla Thunderbird

This update for Mozilla Thunderbird to version 52.7 fixes multiple issues.

The following bugs were fixed:

  • Searching message bodies of messages in local folders, including filter and quick filter operations, did not find content in message attachments
  • Better error handling for Yahoo accounts

The following security fixes are included as part of the mozilla platform. In general, these flaws cannot be exploited through email in Thunderbird because scripting is disabled when reading mail, but are potentially risks in browser or browser-like contexts (MFSA 2018-09, bsc#1085130, bsc#1085671):

  • CVE-2018-5127: Buffer overflow manipulating SVG animatedPathSegList
  • CVE-2018-5129: Out-of-bounds write with malformed IPC messages
  • CVE-2018-5144: Integer overflow during Unicode conversion
  • CVE-2018-5146: Out of bounds memory write in libvorbis
  • CVE-2018-5125: Memory safety bugs fixed in Thunderbird 52.7
  • CVE-2018-5145: Memory safety bugs fixed in Thunderbird 52.7
Record
openSUSE-SU-2018:0818-1
Updated
2026-11-02
OSVopenSUSE-SU-2018:0819-1 No score

Security update for Mozilla Thunderbird

This update for Mozilla Thunderbird to version 52.7 fixes multiple issues.

The following bugs were fixed:

  • Searching message bodies of messages in local folders, including filter and quick filter operations, did not find content in message attachments
  • Better error handling for Yahoo accounts

The following security fixes are included as part of the mozilla platform. In general, these flaws cannot be exploited through email in Thunderbird because scripting is disabled when reading mail, but are potentially risks in browser or browser-like contexts (MFSA 2018-09, bsc#1085130, bsc#1085671):

  • CVE-2018-5127: Buffer overflow manipulating SVG animatedPathSegList
  • CVE-2018-5129: Out-of-bounds write with malformed IPC messages
  • CVE-2018-5144: Integer overflow during Unicode conversion
  • CVE-2018-5146: Out of bounds memory write in libvorbis
  • CVE-2018-5125: Memory safety bugs fixed in Thunderbird 52.7
  • CVE-2018-5145: Memory safety bugs fixed in Thunderbird 52.7
Record
openSUSE-SU-2018:0819-1
Updated
2026-11-02
OSVopenSUSE-SU-2024:10600-1 No score

MozillaFirefox-92.0-1.2 on GA media

These are all security issues fixed in the MozillaFirefox-92.0-1.2 package on the GA media of openSUSE Tumbleweed.

Record
openSUSE-SU-2024:10600-1
Updated
2026-11-02
OSVopenSUSE-SU-2024:10601-1 No score

MozillaThunderbird-91.1.1-1.1 on GA media

These are all security issues fixed in the MozillaThunderbird-91.1.1-1.1 package on the GA media of openSUSE Tumbleweed.

Record
openSUSE-SU-2024:10601-1
Updated
2026-11-02
OSVopenSUSE-SU-2024:11009-1 No score

libvorbis-devel-1.3.7-1.6 on GA media

These are all security issues fixed in the libvorbis-devel-1.3.7-1.6 package on the GA media of openSUSE Tumbleweed.

Record
openSUSE-SU-2024:11009-1
Updated
2026-11-02
OSVopenSUSE-SU-2024:14572-1 No score

firefox-esr-128.5.1-1.1 on GA media

These are all security issues fixed in the firefox-esr-128.5.1-1.1 package on the GA media of openSUSE Tumbleweed.

Record
openSUSE-SU-2024:14572-1
Updated
2026-11-02
OSVSUSE-SU-2018:0783-1 No score

Security update for libvorbis

This update for libvorbis fixes the following issues:

  • CVE-2018-5146: Fixed out of bounds memory write while processing Vorbis audio data (bsc#1085687).
Record
SUSE-SU-2018:0783-1
Updated
2026-11-02
OSVSUSE-SU-2018:0784-1 No score

Security update for libvorbis

This update for libvorbis fixes the following issues:

  • CVE-2018-5146: Fixed out of bounds memory write while processing Vorbis audio data (bsc#1085687).
Record
SUSE-SU-2018:0784-1
Updated
2026-11-02
OSVSUSE-SU-2018:0850-1 No score

Security update for MozillaFirefox

This update for MozillaFirefox fixes the following issues:

Security issues fixed in Firefox ESR 52.7.3 (bsc#1085130):

  • CVE-2018-5125: Memory safety bugs fixed in Firefox 59 and Firefox ESR 52.7
  • CVE-2018-5127: Buffer overflow manipulating SVG animatedPathSegList
  • CVE-2018-5129: Out-of-bounds write with malformed IPC messages
  • CVE-2018-5130: Mismatched RTP payload type can trigger memory corruption
  • CVE-2018-5131: Fetch API improperly returns cached copies of no-store/no-cache resources
  • CVE-2018-5144: Integer overflow during Unicode conversion
  • CVE-2018-5145: Memory safety bugs fixed in Firefox ESR 52.7
  • CVE-2018-5146: Out of bounds memory write in libvorbis (bsc#1085671)
  • CVE-2018-5147: Out of bounds memory write in libtremor (bsc#1085671)
  • CVE-2018-5148: Use-after-free in compositor (MFSA 2018-10) (bsc#1087059)
Record
SUSE-SU-2018:0850-1
Updated
2026-11-02
OSVSUSE-SU-2018:0907-1 No score

Security update for MozillaFirefox

This update for MozillaFirefox fixes the following issues:

Security issues fixed in Firefox ESR 52.7.3 (bsc#1085130):

  • CVE-2018-5125: Memory safety bugs fixed in Firefox 59 and Firefox ESR 52.7
  • CVE-2018-5127: Buffer overflow manipulating SVG animatedPathSegList
  • CVE-2018-5129: Out-of-bounds write with malformed IPC messages
  • CVE-2018-5130: Mismatched RTP payload type can trigger memory corruption
  • CVE-2018-5131: Fetch API improperly returns cached copies of no-store/no-cache resources
  • CVE-2018-5144: Integer overflow during Unicode conversion
  • CVE-2018-5145: Memory safety bugs fixed in Firefox ESR 52.7
  • CVE-2018-5146: Out of bounds memory write in libvorbis (bsc#1085671)
  • CVE-2018-5147: Out of bounds memory write in libtremor (bsc#1085671)
  • CVE-2018-5148: Use-after-free in compositor (MFSA 2018-10) (bsc#1087059)
Record
SUSE-SU-2018:0907-1
Updated
2026-11-02
OSVUSN-3545-1 No score

thunderbird vulnerabilities

Multiple security issues were discovered in Thunderbird. If a user were tricked in to opening a specially crafted website in a browsing context, an attacker could potentially exploit these to cause a denial of service, or execute arbitrary code. (CVE-2018-5125, CVE-2018-5127, CVE-2018-5129, CVE-2018-5144, CVE-2018-5145, CVE-2018-5146)

Record
USN-3545-1
Updated
2026-11-02
OSVUSN-3599-1 No score

firefox vulnerability

An out-of-bounds write was discovered when processing Vorbis audio data. If a user were tricked in to opening a specially crafted website, an attacker could exploit this to cause a denial of service, or execute arbitrary code. (CVE-2018-5146)

Record
USN-3599-1
Updated
2026-11-02
OSVUSN-3604-1 No score

libvorbis vulnerability

Richard Zhu discovered that libvorbis incorrectly handled certain sound files. An attacker could use this to cause libvorbis to crash, resulting in a denial or service, or possibly execute arbitrary code.

Record
USN-3604-1
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
libvorbis
Alpine:v3.10
 before 1.3.6-r0
1.3.6-r0
libvorbis
Alpine:v3.11
 before 1.3.6-r0
1.3.6-r0
libvorbis
Alpine:v3.12
 before 1.3.6-r0
1.3.6-r0
libvorbis
Alpine:v3.13
 before 1.3.6-r0
1.3.6-r0
libvorbis
Alpine:v3.14
 before 1.3.6-r0
1.3.6-r0
libvorbis
Alpine:v3.15
 before 1.3.6-r0
1.3.6-r0
libvorbis
Alpine:v3.16
 before 1.3.6-r0
1.3.6-r0
libvorbis
Alpine:v3.17
 before 1.3.6-r0
1.3.6-r0
libvorbis
Alpine:v3.18
 before 1.3.6-r0
1.3.6-r0
libvorbis
Alpine:v3.19
 before 1.3.6-r0
1.3.6-r0
Show 133 moreShow less
Affected packages
PackageAffectedFixed
libvorbis
Alpine:v3.20
 before 1.3.6-r0
1.3.6-r0
libvorbis
Alpine:v3.21
 before 1.3.6-r0
1.3.6-r0
libvorbis
Alpine:v3.22
 before 1.3.6-r0
1.3.6-r0
libvorbis
Alpine:v3.23
 before 1.3.6-r0
1.3.6-r0
libvorbis
Alpine:v3.24
 before 1.3.6-r0
1.3.6-r0
libvorbis
Alpine:v3.5
 before 1.3.6-r0
1.3.6-r0
libvorbis
Alpine:v3.6
 before 1.3.6-r0
1.3.6-r0
libvorbis
Alpine:v3.7
 before 1.3.6-r0
1.3.6-r0
libvorbis
Alpine:v3.8
 before 1.3.6-r0
1.3.6-r0
libvorbis
Alpine:v3.9
 before 1.3.6-r0
1.3.6-r0
firefox-esr
Debian:12
 before 52.7.2esr-1
52.7.2esr-1
firefox-esr
Debian:13
 before 52.7.2esr-1
52.7.2esr-1
firefox-esr
Debian:14
 before 52.7.2esr-1
52.7.2esr-1
libvorbis
Debian:12
 before 1.3.5-4.2
1.3.5-4.2
libvorbis
Debian:13
 before 1.3.5-4.2
1.3.5-4.2
libvorbis
Debian:14
 before 1.3.5-4.2
1.3.5-4.2
thunderbird
Debian:12
 before 1:52.7.0-1
1:52.7.0-1
thunderbird
Debian:13
 before 1:52.7.0-1
1:52.7.0-1
thunderbird
Debian:14
 before 1:52.7.0-1
1:52.7.0-1
firefox-esr
Debian:7
From an advisory covering 2 CVEs
 before 52.7.2esr-1~deb7u1, plus listed versions
45.0.1esr-145.0.2esr-145.0esr-145.0esr-245.1.0esr-1
Show 45 moreShow less
45.1.1esr-145.2.0esr-145.2.0esr-1~deb7u145.2.0esr-1~deb8u145.3.0esr-145.3.0esr-1~deb7u145.3.0esr-1~deb8u145.3.0esr-245.4.0esr-145.4.0esr-1~deb7u145.4.0esr-1~deb7u245.4.0esr-1~deb8u145.4.0esr-1~deb8u245.4.0esr-245.5.0esr-145.5.0esr-1~deb8u145.5.1esr-145.5.1esr-1~deb7u145.5.1esr-1~deb8u145.6.0esr-145.6.0esr-1~deb7u145.6.0esr-1~deb8u145.7.0esr-145.7.0esr-1~deb7u145.7.0esr-1~deb8u145.7.0esr-245.7.0esr-345.7.0esr-445.8.0esr-145.8.0esr-1~deb7u145.8.0esr-1~deb8u145.9.0esr-145.9.0esr-1~deb7u145.9.0esr-1~deb8u152.0.1esr-152.0.2esr-152.0esr-152.1.0esr-152.2.0esr-152.2.0esr-1~deb7u152.2.0esr-1~deb8u152.2.0esr-1~deb9u152.2.0esr-252.3.0esr-152.3.0esr-1~deb7u1
52.7.2esr-1~deb7u1
thunderbird
Debian:7
From an advisory covering 6 CVEs
 before 1:52.7.0-1~deb7u1, plus listed versions
1.5-41.5.0.2-11.5.0.2-21.5.0.2-31.5.0.4-1
Show 25 moreShow less
1.5.0.4-21.5.0.4-31.5.0.5-11.5.0.7-11.5.0.7-21:52.4.0-11:52.4.0-1~deb7u11:52.4.0-1~deb8u11:52.4.0-1~deb9u11:52.4.0-2~exp11:52.5.0-11:52.5.0-1~deb7u11:52.5.0-1~deb8u11:52.5.0-1~deb9u11:52.5.2-11:52.5.2-1~deb7u11:52.5.2-21:52.5.2-2~deb8u11:52.5.2-2~deb9u11:52.6.0-11:52.6.0-1+alpha.11:52.6.0-1+alpha.21:52.6.0-1~deb7u11:52.6.0-1~deb8u11:52.6.0-1~deb9u1
1:52.7.0-1~deb7u1
libvorbis
Debian:7
From an advisory covering 4 CVEs
 before 1.3.2-1.3+deb7u1, plus listed versions
1.3.2-1.3
1.3.2-1.3+deb7u1
libvorbis
Debian:8
 before 1.3.4-2+deb8u1, plus listed versions
1.3.4-2
1.3.4-2+deb8u1
libvorbis
Debian:9
 before 1.3.5-4+deb9u2, plus listed versions
1.3.5-41.3.5-4+deb9u1
1.3.5-4+deb9u2
firefox-esr
Debian:8
From an advisory covering 2 CVEs
 before 52.7.2esr-1~deb8u1, plus listed versions
45.0.1esr-145.0.2esr-145.0esr-145.0esr-245.1.0esr-1
Show 45 moreShow less
45.1.1esr-145.2.0esr-145.2.0esr-1~deb7u145.2.0esr-1~deb8u145.3.0esr-145.3.0esr-1~deb7u145.3.0esr-1~deb8u145.3.0esr-245.4.0esr-145.4.0esr-1~deb7u145.4.0esr-1~deb7u245.4.0esr-1~deb8u145.4.0esr-1~deb8u245.4.0esr-245.5.0esr-145.5.0esr-1~deb8u145.5.1esr-145.5.1esr-1~deb7u145.5.1esr-1~deb8u145.6.0esr-145.6.0esr-1~deb7u145.6.0esr-1~deb8u145.7.0esr-145.7.0esr-1~deb7u145.7.0esr-1~deb8u145.7.0esr-245.7.0esr-345.7.0esr-445.8.0esr-145.8.0esr-1~deb7u145.8.0esr-1~deb8u145.9.0esr-145.9.0esr-1~deb7u145.9.0esr-1~deb8u152.0.1esr-152.0.2esr-152.0esr-152.1.0esr-152.2.0esr-152.2.0esr-1~deb7u152.2.0esr-1~deb8u152.2.0esr-1~deb9u152.2.0esr-252.3.0esr-152.3.0esr-1~deb7u1
52.7.2esr-1~deb8u1
firefox-esr
Debian:9
From an advisory covering 2 CVEs
 before 52.7.2esr-1~deb9u1, plus listed versions
45.9.0esr-152.0.1esr-152.0.2esr-152.0esr-152.1.0esr-1
Show 40 moreShow less
52.2.0esr-152.2.0esr-1~deb7u152.2.0esr-1~deb8u152.2.0esr-1~deb9u152.2.0esr-252.3.0esr-152.3.0esr-1~deb7u152.3.0esr-1~deb8u152.3.0esr-1~deb8u252.3.0esr-1~deb9u152.3.0esr-252.4.0esr-1~deb8u152.4.0esr-1~deb9u152.4.0esr-252.4.0esr-2~deb7u152.5.0esr-152.5.0esr-1~deb7u152.5.0esr-1~deb8u152.5.0esr-1~deb9u152.5.2esr-152.5.2esr-1~deb7u152.5.2esr-1~deb8u152.5.2esr-1~deb9u152.5.3esr-152.6.0esr-152.6.0esr-1~deb7u152.6.0esr-1~deb8u152.6.0esr-1~deb9u152.6.0esr-252.6.0esr-2+alpha.152.6.0esr-2+alpha.252.7.0esr-152.7.0esr-1~deb8u152.7.0esr-1~deb9u152.7.1esr-152.7.1esr-1~deb7u152.7.1esr-1~deb8u152.7.1esr-1~deb9u152.7.2esr-1~deb7u152.7.2esr-1~deb8u1
52.7.2esr-1~deb9u1
thunderbird
Debian:8
From an advisory covering 6 CVEs
 before 1:52.7.0-1~deb8u1, plus listed versions
1.5-41.5.0.2-11.5.0.2-21.5.0.2-31.5.0.4-1
Show 26 moreShow less
1.5.0.4-21.5.0.4-31.5.0.5-11.5.0.7-11.5.0.7-21:52.4.0-11:52.4.0-1~deb7u11:52.4.0-1~deb8u11:52.4.0-1~deb9u11:52.4.0-2~exp11:52.5.0-11:52.5.0-1~deb7u11:52.5.0-1~deb8u11:52.5.0-1~deb9u11:52.5.2-11:52.5.2-1~deb7u11:52.5.2-21:52.5.2-2~deb8u11:52.5.2-2~deb9u11:52.6.0-11:52.6.0-1+alpha.11:52.6.0-1+alpha.21:52.6.0-1~deb7u11:52.6.0-1~deb8u11:52.6.0-1~deb9u11:52.7.0-1~deb7u1
1:52.7.0-1~deb8u1
thunderbird
Debian:9
From an advisory covering 6 CVEs
 before 1:52.7.0-1~deb9u1, plus listed versions
1.5-41.5.0.2-11.5.0.2-21.5.0.2-31.5.0.4-1
Show 27 moreShow less
1.5.0.4-21.5.0.4-31.5.0.5-11.5.0.7-11.5.0.7-21:52.4.0-11:52.4.0-1~deb7u11:52.4.0-1~deb8u11:52.4.0-1~deb9u11:52.4.0-2~exp11:52.5.0-11:52.5.0-1~deb7u11:52.5.0-1~deb8u11:52.5.0-1~deb9u11:52.5.2-11:52.5.2-1~deb7u11:52.5.2-21:52.5.2-2~deb8u11:52.5.2-2~deb9u11:52.6.0-11:52.6.0-1+alpha.11:52.6.0-1+alpha.21:52.6.0-1~deb7u11:52.6.0-1~deb8u11:52.6.0-1~deb9u11:52.7.0-1~deb7u11:52.7.0-1~deb8u1
1:52.7.0-1~deb9u1
libvorbis
Mageia:5
 before 1.3.5-1.3.mga5
1.3.5-1.3.mga5
libvorbis
Mageia:6
 before 1.3.5-2.3.mga6
1.3.5-2.3.mga6
thunderbird
Mageia:6
From an advisory covering 6 CVEs
 before 52.7.0-1.mga6
52.7.0-1.mga6
thunderbird-l10n
Mageia:6
From an advisory covering 6 CVEs
 before 52.7.0-1.mga6
52.7.0-1.mga6
thunderbird
Mageia:5
From an advisory covering 6 CVEs
 before 52.7.0-1.mga5
52.7.0-1.mga5
thunderbird-l10n
Mageia:5
From an advisory covering 6 CVEs
 before 52.7.0-1.mga5
52.7.0-1.mga5
firefox
Red Hat:enterprise_linux:6::client
 before 0:52.7.2-1.el6_9
0:52.7.2-1.el6_9
firefox-debuginfo
Red Hat:enterprise_linux:6::client
 before 0:52.7.2-1.el6_9
0:52.7.2-1.el6_9
firefox
Red Hat:enterprise_linux:6::computenode
 before 0:52.7.2-1.el6_9
0:52.7.2-1.el6_9
firefox-debuginfo
Red Hat:enterprise_linux:6::computenode
 before 0:52.7.2-1.el6_9
0:52.7.2-1.el6_9
firefox
Red Hat:enterprise_linux:6::server
 before 0:52.7.2-1.el6_9
0:52.7.2-1.el6_9
firefox-debuginfo
Red Hat:enterprise_linux:6::server
 before 0:52.7.2-1.el6_9
0:52.7.2-1.el6_9
firefox
Red Hat:enterprise_linux:6::workstation
 before 0:52.7.2-1.el6_9
0:52.7.2-1.el6_9
firefox-debuginfo
Red Hat:enterprise_linux:6::workstation
 before 0:52.7.2-1.el6_9
0:52.7.2-1.el6_9
firefox
Red Hat:enterprise_linux:7::client
 before 0:52.7.2-1.el7_4
0:52.7.2-1.el7_4
firefox-debuginfo
Red Hat:enterprise_linux:7::client
 before 0:52.7.2-1.el7_4
0:52.7.2-1.el7_4
firefox
Red Hat:enterprise_linux:7::server
 before 0:52.7.2-1.el7_4
0:52.7.2-1.el7_4
firefox-debuginfo
Red Hat:enterprise_linux:7::server
 before 0:52.7.2-1.el7_4
0:52.7.2-1.el7_4
firefox
Red Hat:enterprise_linux:7::workstation
 before 0:52.7.2-1.el7_4
0:52.7.2-1.el7_4
firefox-debuginfo
Red Hat:enterprise_linux:7::workstation
 before 0:52.7.2-1.el7_4
0:52.7.2-1.el7_4
thunderbird
Red Hat:enterprise_linux:6::client
From an advisory covering 6 CVEs
 before 0:52.7.0-1.el6_9
0:52.7.0-1.el6_9
thunderbird-debuginfo
Red Hat:enterprise_linux:6::client
From an advisory covering 6 CVEs
 before 0:52.7.0-1.el6_9
0:52.7.0-1.el6_9
thunderbird
Red Hat:enterprise_linux:6::server
From an advisory covering 6 CVEs
 before 0:52.7.0-1.el6_9
0:52.7.0-1.el6_9
thunderbird-debuginfo
Red Hat:enterprise_linux:6::server
From an advisory covering 6 CVEs
 before 0:52.7.0-1.el6_9
0:52.7.0-1.el6_9
thunderbird
Red Hat:enterprise_linux:6::workstation
From an advisory covering 6 CVEs
 before 0:52.7.0-1.el6_9
0:52.7.0-1.el6_9
thunderbird-debuginfo
Red Hat:enterprise_linux:6::workstation
From an advisory covering 6 CVEs
 before 0:52.7.0-1.el6_9
0:52.7.0-1.el6_9
thunderbird
Red Hat:enterprise_linux:7::client
From an advisory covering 6 CVEs
 before 0:52.7.0-1.el7_4
0:52.7.0-1.el7_4
thunderbird-debuginfo
Red Hat:enterprise_linux:7::client
From an advisory covering 6 CVEs
 before 0:52.7.0-1.el7_4
0:52.7.0-1.el7_4
thunderbird
Red Hat:enterprise_linux:7::server
From an advisory covering 6 CVEs
 before 0:52.7.0-1.el7_4
0:52.7.0-1.el7_4
thunderbird-debuginfo
Red Hat:enterprise_linux:7::server
From an advisory covering 6 CVEs
 before 0:52.7.0-1.el7_4
0:52.7.0-1.el7_4
thunderbird
Red Hat:enterprise_linux:7::workstation
From an advisory covering 6 CVEs
 before 0:52.7.0-1.el7_4
0:52.7.0-1.el7_4
thunderbird-debuginfo
Red Hat:enterprise_linux:7::workstation
From an advisory covering 6 CVEs
 before 0:52.7.0-1.el7_4
0:52.7.0-1.el7_4
libvorbis
Red Hat:enterprise_linux:6::client
 before 1:1.2.3-5.el6_9.1
1:1.2.3-5.el6_9.1
libvorbis-debuginfo
Red Hat:enterprise_linux:6::client
 before 1:1.2.3-5.el6_9.1
1:1.2.3-5.el6_9.1
libvorbis-devel
Red Hat:enterprise_linux:6::client
 before 1:1.2.3-5.el6_9.1
1:1.2.3-5.el6_9.1
libvorbis-devel-docs
Red Hat:enterprise_linux:6::client
 before 1:1.2.3-5.el6_9.1
1:1.2.3-5.el6_9.1
libvorbis
Red Hat:enterprise_linux:6::computenode
 before 1:1.2.3-5.el6_9.1
1:1.2.3-5.el6_9.1
libvorbis-debuginfo
Red Hat:enterprise_linux:6::computenode
 before 1:1.2.3-5.el6_9.1
1:1.2.3-5.el6_9.1
libvorbis-devel
Red Hat:enterprise_linux:6::computenode
 before 1:1.2.3-5.el6_9.1
1:1.2.3-5.el6_9.1
libvorbis-devel-docs
Red Hat:enterprise_linux:6::computenode
 before 1:1.2.3-5.el6_9.1
1:1.2.3-5.el6_9.1
libvorbis
Red Hat:enterprise_linux:6::server
 before 1:1.2.3-5.el6_9.1
1:1.2.3-5.el6_9.1
libvorbis-debuginfo
Red Hat:enterprise_linux:6::server
 before 1:1.2.3-5.el6_9.1
1:1.2.3-5.el6_9.1
libvorbis-devel
Red Hat:enterprise_linux:6::server
 before 1:1.2.3-5.el6_9.1
1:1.2.3-5.el6_9.1
libvorbis-devel-docs
Red Hat:enterprise_linux:6::server
 before 1:1.2.3-5.el6_9.1
1:1.2.3-5.el6_9.1
libvorbis
Red Hat:enterprise_linux:6::workstation
 before 1:1.2.3-5.el6_9.1
1:1.2.3-5.el6_9.1
libvorbis-debuginfo
Red Hat:enterprise_linux:6::workstation
 before 1:1.2.3-5.el6_9.1
1:1.2.3-5.el6_9.1
libvorbis-devel
Red Hat:enterprise_linux:6::workstation
 before 1:1.2.3-5.el6_9.1
1:1.2.3-5.el6_9.1
libvorbis-devel-docs
Red Hat:enterprise_linux:6::workstation
 before 1:1.2.3-5.el6_9.1
1:1.2.3-5.el6_9.1
libvorbis
Red Hat:enterprise_linux:7::client
 before 1:1.3.3-8.el7.1
1:1.3.3-8.el7.1
libvorbis-debuginfo
Red Hat:enterprise_linux:7::client
 before 1:1.3.3-8.el7.1
1:1.3.3-8.el7.1
libvorbis-devel
Red Hat:enterprise_linux:7::client
 before 1:1.3.3-8.el7.1
1:1.3.3-8.el7.1
libvorbis-devel-docs
Red Hat:enterprise_linux:7::client
 before 1:1.3.3-8.el7.1
1:1.3.3-8.el7.1
libvorbis
Red Hat:enterprise_linux:7::computenode
 before 1:1.3.3-8.el7.1
1:1.3.3-8.el7.1
libvorbis-debuginfo
Red Hat:enterprise_linux:7::computenode
 before 1:1.3.3-8.el7.1
1:1.3.3-8.el7.1
libvorbis-devel
Red Hat:enterprise_linux:7::computenode
 before 1:1.3.3-8.el7.1
1:1.3.3-8.el7.1
libvorbis-devel-docs
Red Hat:enterprise_linux:7::computenode
 before 1:1.3.3-8.el7.1
1:1.3.3-8.el7.1
libvorbis
Red Hat:enterprise_linux:7::server
 before 1:1.3.3-8.el7.1
1:1.3.3-8.el7.1
libvorbis-debuginfo
Red Hat:enterprise_linux:7::server
 before 1:1.3.3-8.el7.1
1:1.3.3-8.el7.1
libvorbis-devel
Red Hat:enterprise_linux:7::server
 before 1:1.3.3-8.el7.1
1:1.3.3-8.el7.1
libvorbis-devel-docs
Red Hat:enterprise_linux:7::server
 before 1:1.3.3-8.el7.1
1:1.3.3-8.el7.1
libvorbis
Red Hat:enterprise_linux:7::workstation
 before 1:1.3.3-8.el7.1
1:1.3.3-8.el7.1
libvorbis-debuginfo
Red Hat:enterprise_linux:7::workstation
 before 1:1.3.3-8.el7.1
1:1.3.3-8.el7.1
libvorbis-devel
Red Hat:enterprise_linux:7::workstation
 before 1:1.3.3-8.el7.1
1:1.3.3-8.el7.1
libvorbis-devel-docs
Red Hat:enterprise_linux:7::workstation
 before 1:1.3.3-8.el7.1
1:1.3.3-8.el7.1
libvorbis
SUSE:Linux Enterprise Software Development Kit 11 SP4
 before 1.2.0-79.20.6.1
1.2.0-79.20.6.1
libvorbis
SUSE:Linux Enterprise Server 11 SP4
 before 1.2.0-79.20.6.1
1.2.0-79.20.6.1
libvorbis
SUSE:Linux Enterprise Server for SAP Applications 11 SP4
 before 1.2.0-79.20.6.1
1.2.0-79.20.6.1
libvorbis
SUSE:Linux Enterprise Desktop 12 SP2
 before 1.3.3-10.6.1
1.3.3-10.6.1
libvorbis
SUSE:Linux Enterprise Desktop 12 SP3
 before 1.3.3-10.6.1
1.3.3-10.6.1
libvorbis
SUSE:Linux Enterprise Server for Raspberry Pi 12 SP2
 before 1.3.3-10.6.1
1.3.3-10.6.1
libvorbis
SUSE:Linux Enterprise Software Development Kit 12 SP2
 before 1.3.3-10.6.1
1.3.3-10.6.1
libvorbis
SUSE:Linux Enterprise Software Development Kit 12 SP3
 before 1.3.3-10.6.1
1.3.3-10.6.1
libvorbis
SUSE:Linux Enterprise Server 12 SP2
 before 1.3.3-10.6.1
1.3.3-10.6.1
libvorbis
SUSE:Linux Enterprise Server for SAP Applications 12 SP2
 before 1.3.3-10.6.1
1.3.3-10.6.1
libvorbis
SUSE:Linux Enterprise Server 12 SP3
 before 1.3.3-10.6.1
1.3.3-10.6.1
libvorbis
SUSE:Linux Enterprise Server for SAP Applications 12 SP3
 before 1.3.3-10.6.1
1.3.3-10.6.1
MozillaFirefox
SUSE:Linux Enterprise Desktop 12 SP2
From an advisory covering 10 CVEs
 before 52.7.3esr-109.25.1
52.7.3esr-109.25.1
MozillaFirefox
SUSE:Linux Enterprise Desktop 12 SP3
From an advisory covering 10 CVEs
 before 52.7.3esr-109.25.1
52.7.3esr-109.25.1
MozillaFirefox
SUSE:Linux Enterprise Server for Raspberry Pi 12 SP2
From an advisory covering 10 CVEs
 before 52.7.3esr-109.25.1
52.7.3esr-109.25.1
MozillaFirefox
SUSE:Linux Enterprise Software Development Kit 12 SP2
From an advisory covering 10 CVEs
 before 52.7.3esr-109.25.1
52.7.3esr-109.25.1
MozillaFirefox
SUSE:Linux Enterprise Software Development Kit 12 SP3
From an advisory covering 10 CVEs
 before 52.7.3esr-109.25.1
52.7.3esr-109.25.1
MozillaFirefox
SUSE:Linux Enterprise Server 12 SP2
From an advisory covering 10 CVEs
 before 52.7.3esr-109.25.1
52.7.3esr-109.25.1
MozillaFirefox
SUSE:Linux Enterprise Server for SAP Applications 12 SP2
From an advisory covering 10 CVEs
 before 52.7.3esr-109.25.1
52.7.3esr-109.25.1
MozillaFirefox
SUSE:Linux Enterprise Server 12 SP3
From an advisory covering 10 CVEs
 before 52.7.3esr-109.25.1
52.7.3esr-109.25.1
MozillaFirefox
SUSE:Linux Enterprise Server for SAP Applications 12 SP3
From an advisory covering 10 CVEs
 before 52.7.3esr-109.25.1
52.7.3esr-109.25.1
MozillaFirefox
SUSE:Linux Enterprise Software Development Kit 11 SP4
From an advisory covering 10 CVEs
 before 52.7.3esr-72.27.2
52.7.3esr-72.27.2
MozillaFirefox
SUSE:Linux Enterprise Point of Sale 11 SP3
From an advisory covering 10 CVEs
 before 52.7.3esr-72.27.2
52.7.3esr-72.27.2
MozillaFirefox
SUSE:Linux Enterprise Server 11 SP3-LTSS
From an advisory covering 10 CVEs
 before 52.7.3esr-72.27.2
52.7.3esr-72.27.2
MozillaFirefox
SUSE:Linux Enterprise Server 11 SP3-TERADATA
From an advisory covering 10 CVEs
 before 52.7.3esr-72.27.2
52.7.3esr-72.27.2
MozillaFirefox
SUSE:Linux Enterprise Server 11 SP4
From an advisory covering 10 CVEs
 before 52.7.3esr-72.27.2
52.7.3esr-72.27.2
MozillaFirefox
SUSE:Linux Enterprise Server for SAP Applications 11 SP4
From an advisory covering 10 CVEs
 before 52.7.3esr-72.27.2
52.7.3esr-72.27.2
firefox
Ubuntu:14.04:LTS
 before 59.0.1+build1-0ubuntu0.14.04.1, plus listed versions
24.0+build1-0ubuntu125.0+build3-0ubuntu0.13.10.128.0~b2+build1-0ubuntu228.0+build1-0ubuntu128.0+build2-0ubuntu1
Show 45 moreShow less
28.0+build2-0ubuntu229.0+build1-0ubuntu0.14.04.230.0+build1-0ubuntu0.14.04.331.0+build1-0ubuntu0.14.04.132.0+build1-0ubuntu0.14.04.132.0.3+build1-0ubuntu0.14.04.133.0+build2-0ubuntu0.14.04.134.0+build2-0ubuntu0.14.04.135.0+build3-0ubuntu0.14.04.235.0.1+build1-0ubuntu0.14.04.136.0+build2-0ubuntu0.14.04.436.0.1+build2-0ubuntu0.14.04.136.0.4+build1-0ubuntu0.14.04.137.0+build2-0ubuntu0.14.04.137.0.1+build1-0ubuntu0.14.04.137.0.2+build1-0ubuntu0.14.04.138.0+build3-0ubuntu0.14.04.139.0+build5-0ubuntu0.14.04.139.0.3+build2-0ubuntu0.14.04.140.0+build4-0ubuntu0.14.04.140.0+build4-0ubuntu0.14.04.440.0.3+build1-0ubuntu0.14.04.141.0+build3-0ubuntu0.14.04.141.0.1+build2-0ubuntu0.14.04.141.0.2+build2-0ubuntu0.14.04.142.0+build2-0ubuntu0.14.04.143.0+build1-0ubuntu0.14.04.143.0.4+build3-0ubuntu0.14.04.144.0+build3-0ubuntu0.14.04.144.0.1+build2-0ubuntu0.14.04.144.0.2+build1-0ubuntu0.14.04.145.0+build2-0ubuntu0.14.04.145.0.1+build1-0ubuntu0.14.04.245.0.2+build1-0ubuntu0.14.04.146.0+build5-0ubuntu0.14.04.246.0.1+build1-0ubuntu0.14.04.347.0+build3-0ubuntu0.14.04.148.0+build2-0ubuntu0.14.04.149.0+build4-0ubuntu0.14.04.149.0.2+build2-0ubuntu0.14.04.150.0+build2-0ubuntu0.14.04.250.0.2+build1-0ubuntu0.14.04.150.1.0+build2-0ubuntu0.14.04.151.0.1+build2-0ubuntu0.14.04.151.0.1+build2-0ubuntu0.14.04.2
59.0.1+build1-0ubuntu0.14.04.1
libvorbis
Ubuntu:14.04:LTS
 before 1.3.2-1.3ubuntu1.2, plus listed versions
1.3.2-1.31.3.2-1.3ubuntu11.3.2-1.3ubuntu1.1
1.3.2-1.3ubuntu1.2
thunderbird
Ubuntu:14.04:LTS
 before 1:52.7.0+build1-0ubuntu0.14.04.1, plus listed versions
1:24.0+build1-0ubuntu11:24.0+build1-0ubuntu21:24.1.1+build1-0ubuntu0.13.10.11:24.1.1+build1-0ubuntu11:24.2.0+build1-0ubuntu1
Show 32 moreShow less
1:24.4.0+build1-0ubuntu11:24.5.0+build1-0ubuntu0.14.04.11:24.6.0+build1-0ubuntu0.14.04.11:31.0+build1-0ubuntu0.14.04.11:31.1.1+build1-0ubuntu0.14.04.11:31.1.2+build1-0ubuntu0.14.04.11:31.2.0+build2-0ubuntu0.14.04.11:31.3.0+build1-0ubuntu0.14.04.11:31.4.0+build1-0ubuntu0.14.04.11:31.5.0+build1-0ubuntu0.14.04.11:31.6.0+build1-0ubuntu0.14.04.11:31.7.0+build1-0ubuntu0.14.04.11:31.8.0+build1-0ubuntu0.14.04.11:38.2.0+build1-0ubuntu0.14.04.11:38.3.0+build1-0ubuntu0.14.04.11:38.4.0+build3-0ubuntu0.14.04.11:38.5.1+build2-0ubuntu0.14.04.11:38.6.0+build1-0ubuntu0.14.04.11:38.7.2+build1-0ubuntu0.14.04.11:38.8.0+build1-0ubuntu0.14.04.11:45.2.0+build1-0ubuntu0.14.04.31:45.3.0+build1-0ubuntu0.14.04.41:45.4.0+build1-0ubuntu0.14.04.11:45.5.1+build1-0ubuntu0.14.04.11:45.7.0+build1-0ubuntu0.14.04.11:45.8.0+build1-0ubuntu0.14.04.11:52.1.1+build1-0ubuntu0.14.04.11:52.2.1+build1-0ubuntu0.14.04.11:52.3.0+build1-0ubuntu0.14.04.11:52.4.0+build1-0ubuntu0.14.04.21:52.5.0+build1-0ubuntu0.14.04.11:52.6.0+build1-0ubuntu0.14.04.1
1:52.7.0+build1-0ubuntu0.14.04.1
firefox
Ubuntu:16.04:LTS
 before 59.0.1+build1-0ubuntu0.16.04.1, plus listed versions
41.0.2+build2-0ubuntu142.0+build2-0ubuntu144.0+build3-0ubuntu244.0.1+build1-0ubuntu144.0.2+build1-0ubuntu1
Show 34 moreShow less
45.0+build2-0ubuntu145.0.1+build1-0ubuntu145.0.2+build1-0ubuntu146.0+build5-0ubuntu0.16.04.246.0.1+build1-0ubuntu0.16.04.247.0+build3-0ubuntu0.16.04.148.0+build2-0ubuntu0.16.04.149.0+build4-0ubuntu0.16.04.149.0.2+build2-0ubuntu0.16.04.250.0+build2-0ubuntu0.16.04.250.0.2+build1-0ubuntu0.16.04.150.1.0+build2-0ubuntu0.16.04.151.0.1+build2-0ubuntu0.16.04.151.0.1+build2-0ubuntu0.16.04.252.0+build2-0ubuntu0.16.04.152.0.1+build2-0ubuntu0.16.04.152.0.2+build1-0ubuntu0.16.04.153.0+build6-0ubuntu0.16.04.153.0.2+build1-0ubuntu0.16.04.253.0.3+build1-0ubuntu0.16.04.254.0+build3-0ubuntu0.16.04.155.0.1+build2-0ubuntu0.16.04.255.0.2+build1-0ubuntu0.16.04.156.0+build6-0ubuntu0.16.04.156.0+build6-0ubuntu0.16.04.257.0+build4-0ubuntu0.16.04.557.0+build4-0ubuntu0.16.04.657.0.1+build2-0ubuntu0.16.04.157.0.3+build1-0ubuntu0.16.04.157.0.4+build1-0ubuntu0.16.04.158.0+build6-0ubuntu0.16.04.158.0.1+build1-0ubuntu0.16.04.158.0.2+build1-0ubuntu0.16.04.159.0+build5-0ubuntu0.16.04.1
59.0.1+build1-0ubuntu0.16.04.1
libvorbis
Ubuntu:16.04:LTS
 before 1.3.5-3ubuntu0.2, plus listed versions
1.3.4-21.3.4-31.3.5-21.3.5-31.3.5-3ubuntu0.1
1.3.5-3ubuntu0.2
thunderbird
Ubuntu:16.04:LTS
 before 1:52.7.0+build1-0ubuntu0.16.04.1, plus listed versions
1:38.3.0+build1-0ubuntu21:38.5.1+build2-0ubuntu11:38.6.0+build1-0ubuntu11:38.7.2+build1-0ubuntu0.16.04.11:38.8.0+build1-0ubuntu0.16.04.1
Show 12 moreShow less
1:45.2.0+build1-0ubuntu0.16.04.11:45.3.0+build1-0ubuntu0.16.04.21:45.4.0+build1-0ubuntu0.16.04.11:45.5.1+build1-0ubuntu0.16.04.11:45.7.0+build1-0ubuntu0.16.04.11:45.8.0+build1-0ubuntu0.16.04.11:52.1.1+build1-0ubuntu0.16.04.11:52.2.1+build1-0ubuntu0.16.04.11:52.3.0+build1-0ubuntu0.16.04.11:52.4.0+build1-0ubuntu0.16.04.21:52.5.0+build1-0ubuntu0.16.04.11:52.6.0+build1-0ubuntu0.16.04.1
1:52.7.0+build1-0ubuntu0.16.04.1
thunderbird
Ubuntu:18.04:LTS
 before 1:52.7.0+build1-0ubuntu1, plus listed versions
1:52.4.0+build1-0ubuntu21:52.6.0+build1-0ubuntu1
1:52.7.0+build1-0ubuntu1
thunderbird
Ubuntu:14.04:LTS
From an advisory covering 6 CVEs
 before 1:52.7.0+build1-0ubuntu0.14.04.1, plus listed versions
1:24.0+build1-0ubuntu11:24.0+build1-0ubuntu21:24.1.1+build1-0ubuntu0.13.10.11:24.1.1+build1-0ubuntu11:24.2.0+build1-0ubuntu1
Show 32 moreShow less
1:24.4.0+build1-0ubuntu11:24.5.0+build1-0ubuntu0.14.04.11:24.6.0+build1-0ubuntu0.14.04.11:31.0+build1-0ubuntu0.14.04.11:31.1.1+build1-0ubuntu0.14.04.11:31.1.2+build1-0ubuntu0.14.04.11:31.2.0+build2-0ubuntu0.14.04.11:31.3.0+build1-0ubuntu0.14.04.11:31.4.0+build1-0ubuntu0.14.04.11:31.5.0+build1-0ubuntu0.14.04.11:31.6.0+build1-0ubuntu0.14.04.11:31.7.0+build1-0ubuntu0.14.04.11:31.8.0+build1-0ubuntu0.14.04.11:38.2.0+build1-0ubuntu0.14.04.11:38.3.0+build1-0ubuntu0.14.04.11:38.4.0+build3-0ubuntu0.14.04.11:38.5.1+build2-0ubuntu0.14.04.11:38.6.0+build1-0ubuntu0.14.04.11:38.7.2+build1-0ubuntu0.14.04.11:38.8.0+build1-0ubuntu0.14.04.11:45.2.0+build1-0ubuntu0.14.04.31:45.3.0+build1-0ubuntu0.14.04.41:45.4.0+build1-0ubuntu0.14.04.11:45.5.1+build1-0ubuntu0.14.04.11:45.7.0+build1-0ubuntu0.14.04.11:45.8.0+build1-0ubuntu0.14.04.11:52.1.1+build1-0ubuntu0.14.04.11:52.2.1+build1-0ubuntu0.14.04.11:52.3.0+build1-0ubuntu0.14.04.11:52.4.0+build1-0ubuntu0.14.04.21:52.5.0+build1-0ubuntu0.14.04.11:52.6.0+build1-0ubuntu0.14.04.1
1:52.7.0+build1-0ubuntu0.14.04.1
thunderbird
Ubuntu:16.04:LTS
From an advisory covering 6 CVEs
 before 1:52.7.0+build1-0ubuntu0.16.04.1, plus listed versions
1:38.3.0+build1-0ubuntu21:38.5.1+build2-0ubuntu11:38.6.0+build1-0ubuntu11:38.7.2+build1-0ubuntu0.16.04.11:38.8.0+build1-0ubuntu0.16.04.1
Show 12 moreShow less
1:45.2.0+build1-0ubuntu0.16.04.11:45.3.0+build1-0ubuntu0.16.04.21:45.4.0+build1-0ubuntu0.16.04.11:45.5.1+build1-0ubuntu0.16.04.11:45.7.0+build1-0ubuntu0.16.04.11:45.8.0+build1-0ubuntu0.16.04.11:52.1.1+build1-0ubuntu0.16.04.11:52.2.1+build1-0ubuntu0.16.04.11:52.3.0+build1-0ubuntu0.16.04.11:52.4.0+build1-0ubuntu0.16.04.21:52.5.0+build1-0ubuntu0.16.04.11:52.6.0+build1-0ubuntu0.16.04.1
1:52.7.0+build1-0ubuntu0.16.04.1
MozillaThunderbird
SUSE:Package Hub 12
From an advisory covering 6 CVEs
 before 52.7-57.1
52.7-57.1
MozillaFirefox
openSUSE:Tumbleweed
From an advisory covering 661 CVEs
 before 92.0-1.2
92.0-1.2
MozillaThunderbird
openSUSE:Tumbleweed
From an advisory covering 394 CVEs
 before 91.1.1-1.1
91.1.1-1.1
libvorbis
openSUSE:Tumbleweed
From an advisory covering 9 CVEs
 before 1.3.7-1.6
1.3.7-1.6
firefox-esr
openSUSE:Tumbleweed
From an advisory covering 1860 CVEs
 before 128.5.1-1.1
128.5.1-1.1

Public exploits

Links only. Every CVE stores no exploit code.

Public exploits
SourceLinkDate
PoC in GitHubf01965/CVE-2018-51462022-04-10

History

History
RecordedChangedSources
affected, facts
aliasesEUVD
first indexedCVE List, GitHub Advisories, NVD, OSV, PoC in GitHub

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2018-5146 is a high vulnerability (CVSS 8.8) in Mozilla Firefox, published March 16, 2018. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 11.9%, the 96th percentile. Fixed in libvorbis 1.3.6-r0.

References

Show 194 moreShow less
This page doesn't list everything

Left out here: 83 versions and 1,839 references. The JSON record has them.

Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open