The version of Thunderbird installed on the remote macOS or Mac OS X host is prior to 78.14. It is, therefore, affected by multiple vulnerabilities as referenced in the mfsa2021-42 advisory.

  - Mozilla developers Tyson Smith and Gabriele Svelto reported memory safety bugs present in Thunderbird     78.13. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some     of these could have been exploited to run arbitrary code. (CVE-2021-38493)

  - When delegating navigations to the operating system, Thunderbird would accept the `mk` scheme which might     allow attackers to launch pages and execute scripts in Internet Explorer in unprivileged mode.  This bug     only affects Thunderbird for Windows. Other operating systems are unaffected. (CVE-2021-38492)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Ubuntu 18.04 LTS / 20.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-5074-1 advisory.

    Multiple security issues were discovered in Firefox. If a user were tricked into opening a specially     crafted website, an attacker could potentially exploit these to cause a denial of service, bypass mixed     content blocking, or execute arbitrary code.

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Debian 10 / 11 host has packages installed that are affected by a vulnerability as referenced in the dsa-4969 advisory.

  - Mozilla developers reported memory safety bugs present in Firefox 91 and Firefox ESR 78.13. Some of these     bugs showed evidence of memory corruption and we presume that with enough effort some of these could have     been exploited to run arbitrary code. This vulnerability affects Firefox ESR < 78.14, Thunderbird < 78.14,     and Firefox < 92. (CVE-2021-38493)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Scientific Linux 7 host has packages installed that are affected by a vulnerability as referenced in the SLSA-2021:3494-1 advisory.

  - Mozilla: Memory safety bugs fixed in Firefox 92, Firefox ESR 78.14 and Firefox ESR 91.1 (CVE-2021-38493)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Debian 9 host has packages installed that are affected by a vulnerability as referenced in the dla-2757 advisory.

  - Mozilla developers reported memory safety bugs present in Firefox 91 and Firefox ESR 78.13. Some of these     bugs showed evidence of memory corruption and we presume that with enough effort some of these could have     been exploited to run arbitrary code. This vulnerability affects Firefox ESR < 78.14, Thunderbird < 78.14,     and Firefox < 92. (CVE-2021-38493)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 7 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2021:3498 advisory.

    Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and     portability.

    This update upgrades Firefox to version 78.14.0 ESR.

    Security Fix(es):

    * Mozilla: Memory safety bugs fixed in Firefox 92, Firefox ESR 78.14 and Firefox ESR 91.1 (CVE-2021-38493)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2021:3501 advisory.

    Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and     portability.

    This update upgrades Firefox to version 78.14.0 ESR.

    Security Fix(es):

    * Mozilla: Memory safety bugs fixed in Firefox 92, Firefox ESR 78.14 and Firefox ESR 91.1 (CVE-2021-38493)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote CentOS Linux 8 host has a package installed that is affected by a vulnerability as referenced in the CESA-2021:3497 advisory.

  - Mozilla: Memory safety bugs fixed in Firefox 92, Firefox ESR 78.14 and Firefox ESR 91.1 (CVE-2021-38493)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote CentOS Linux 7 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2021:3498 advisory.

  - Mozilla developers reported memory safety bugs present in Firefox 91 and Firefox ESR 78.13. Some of these     bugs showed evidence of memory corruption and we presume that with enough effort some of these could have     been exploited to run arbitrary code. This vulnerability affects Firefox ESR < 78.14, Thunderbird < 78.14,     and Firefox < 92. (CVE-2021-38493)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote CentOS Linux 7 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2021:3494 advisory.

  - Mozilla developers reported memory safety bugs present in Firefox 91 and Firefox ESR 78.13. Some of these     bugs showed evidence of memory corruption and we presume that with enough effort some of these could have     been exploited to run arbitrary code. This vulnerability affects Firefox ESR < 78.14, Thunderbird < 78.14,     and Firefox < 92. (CVE-2021-38493)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote MiracleLinux 4 host has a package installed that is affected by a vulnerability as referenced in the AXSA:2021-2419:18 advisory.

    Mozilla: Memory safety bugs fixed in Firefox 92, Firefox ESR 78.14 and     Firefox ESR 91.1 (CVE-2021-38493)     CVE(s):
    CVE-2021-38493
    ** RESERVED ** This candidate has been reserved by an organization or individual that will use it when     announcing a new security problem. When the candidate has been publicized, the details for this candidate     will be provided.

Tenable has extracted the preceding description block directly from the MiracleLinux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Published	Updated	Severity
153112	Mozilla Thunderbird < 78.14	Nessus	MacOS X Local Security Checks	9/8/2021	11/18/2025	high
153183	Ubuntu 18.04 LTS / 20.04 LTS : Firefox vulnerabilities (USN-5074-1)	Nessus	Ubuntu Local Security Checks	9/9/2021	3/6/2025	high
153202	Debian DSA-4969-1 : firefox-esr - security update	Nessus	Debian Local Security Checks	9/10/2021	3/6/2025	high
153225	Scientific Linux Security Update : thunderbird on SL7.x x86_64 (2021:3494)	Nessus	Scientific Linux Local Security Checks	9/13/2021	3/6/2025	high
153226	Debian DLA-2757-1 : thunderbird - LTS security update	Nessus	Debian Local Security Checks	9/13/2021	3/6/2025	high
153238	RHEL 7 : firefox (RHSA-2021:3498)	Nessus	Red Hat Local Security Checks	9/13/2021	3/6/2025	high
153242	RHEL 8 : firefox (RHSA-2021:3501)	Nessus	Red Hat Local Security Checks	9/13/2021	3/6/2025	high
153412	CentOS 8 : firefox (CESA-2021:3497)	Nessus	CentOS Local Security Checks	9/15/2021	3/6/2025	high
153472	CentOS 7 : firefox (RHSA-2021:3498)	Nessus	CentOS Local Security Checks	9/17/2021	3/6/2025	high
153473	CentOS 7 : thunderbird (RHSA-2021:3494)	Nessus	CentOS Local Security Checks	9/17/2021	3/6/2025	high
294533	MiracleLinux 4 : thunderbird-78.14.0-1.0.1.AXS4 (AXSA:2021-2419:18)	Nessus	Miracle Linux Local Security Checks	1/20/2026	1/20/2026	high

Detections

Analytics

Plugins Search

high

high

high

high

high

high

high

high

high

high

high