CVE-2026-84639
CRITICAL9.1CVSS v3
—CVSS v2
0.32%
EPSS (exploit probability)
CWE-457CWE
Description
Triggering an error condition in certain MIME bodies would cause uninitialized memory to be used. This vulnerability was fixed in Thunderbird 155, Thunderbird 140.15, and Thunderbird 153.2.
CVSS v3 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H
Affected routers (0)
No routers currently mapped to this CVE in our database.