high8.1
CVE-2026-92239
A maliciously constructed IMAP line could cause an out-of-bounds buffer read.
Impact
A maliciously constructed IMAP line could cause an out-of-bounds buffer read. This vulnerability was fixed in Thunderbird 156, Thunderbird 140.16, and Thunderbird 153.3.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Mozilla | Thunderbird | before 140.16.0 from 141.0 before 153.3.0 from 154.0 before 156.0 |