Vulnerabilities

CVSS

7.5 High

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Risk score

60.0

Published

2026-07-22

Status

Published

The code to parse MIME headers for display when forwarding a message (if the setting to view all headers was enabled) had an off-by-one error, allowing a single byte to be read from the memory after the buffer for the headers, and potentially crashing Thunderbird. This vulnerability was fixed in Thunderbird 153 and Thunderbird 140.13.

Weaknesses

CWE-193

Coverage 1

vulnerability

Multiples vulnérabilités dans Mozilla Thunderbird (23 juillet 2026)

Mozilla Thunderbird contains multiple vulnerabilities that could lead to data compromise, security policy bypass, denial of service, remote code execution, and privilege escalation. These vulnerabilities are present in v…

CERT-FR · Jul 23, 2026 High

CVE-2026-14899CVE-2026-15718CVE-2026-15719vulnerabilitysecurityfirefox

All articles mentioning it

Advisories and references

• bugzilla.mozilla.org/show_bug.cgi?id=2046137
• mozilla.org/security/advisories/mfsa2026-71/
• mozilla.org/security/advisories/mfsa2026-72/