← Back

CVE-2026-84639

nvd nist
Published: Sep 1, 2026Modified: Sep 3, 2026

JSON object

Loading...
9.1
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H
Exploitability: 3.9 / Impact: 5.2
Source: 134c704f-9b21-4f2e-91b3-4a467353bcc0 (Secondary)

Description

Triggering an error condition in certain MIME bodies would cause uninitialized memory to be used. This vulnerability was fixed in Thunderbird 155, Thunderbird 140.15, and Thunderbird 153.2.

Affected (3)

Products: Mozilla: Thunderbird
Mozilla
1 product
Thunderbird
Configuration A
3 vulnerable
Vulnerable SoftwareAffected Versions
Mozilla
Thunderbird
Before 140.15.0
Thunderbird
From 141.0 to 153.2.0
Thunderbird
From 154.0 to 155.0

Related CWEs

CWE-457
Use of Uninitialized Variable
The code uses a variable that has not been initialized, leading to unpredictable or unintended results.

References (4)

Source: security@mozilla.org
Permissions Required
Source: security@mozilla.org
Vendor Advisory
Source: security@mozilla.org
Vendor Advisory
Source: security@mozilla.org
Vendor Advisory

Timeline

No history available yet.