CVE-2026-92239
A maliciously constructed IMAP line could cause an out-of-bounds buffer read. This vulnerability was fixed in Thunderbird 156 and Thunderbird 140.16.
Scoring
- CVSS base score
- 0
- EPSS probability
- 0.18%
- Published
- 2026-09-15
- Last modified
- 2026-09-16
Affected products
- Mozilla Thunderbird
- Mozilla Thunderbird
- Mozilla Thunderbird