CVE-2026-84640

Updated on 01 Sep 2026

Severity

Awaiting Analysis

Details

CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Overview

About vulnerability

A maliciously constructed mail header could lead to a one byte read past the end of a buffer. This vulnerability was fixed in Thunderbird 155, Thunderbird 140.15, and Thunderbird 153.2.

Details

Affected product:
AlmaLinux 9.2 ESU
Affected packages:
thunderbird @ 153.2.0