Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2026-84639

Опубликовано: 01 сент. 2026
Источник: nvd
CVSS3: 9.1
EPSS Низкий

Описание

Triggering an error condition in certain MIME bodies would cause uninitialized memory to be used. This vulnerability was fixed in Thunderbird 155, Thunderbird 140.15, and Thunderbird 153.2.

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:mozilla:thunderbird:*:*:*:*:*:*:*:*
Версия до 140.15.0 (исключая)
cpe:2.3:a:mozilla:thunderbird:*:*:*:*:*:*:*:*
Версия от 141.0 (включая) до 153.2.0 (исключая)
cpe:2.3:a:mozilla:thunderbird:*:*:*:*:*:*:*:*
Версия от 154.0 (включая) до 155.0 (исключая)

EPSS

Процентиль: 25%
0.00323
Низкий

9.1 Critical

CVSS3

Дефекты

CWE-457

Связанные уязвимости

CVSS3: 9.1
ubuntu
2 месяца назад

Triggering an error condition in certain MIME bodies would cause uninitialized memory to be used. This vulnerability was fixed in Thunderbird 155, Thunderbird 140.15, and Thunderbird 153.2.

CVSS3: 7.5
redhat
2 месяца назад

Triggering an error condition in certain MIME bodies would cause uninitialized memory to be used. This vulnerability was fixed in Thunderbird 155, Thunderbird 140.15, and Thunderbird 153.2.

CVSS3: 9.1
debian
2 месяца назад

Triggering an error condition in certain MIME bodies would cause unini ...

CVSS3: 9.1
github
2 месяца назад

Triggering an error condition in certain MIME bodies would cause uninitialized memory to be used. This vulnerability was fixed in Thunderbird 155, Thunderbird 140.15, and Thunderbird 153.2.

CVSS3: 9.8
altlinux
2 месяца назад

ALT-PU-2026-14614: package `thunderbird` update to version 155.0-alt1

EPSS

Процентиль: 25%
0.00323
Низкий

9.1 Critical

CVSS3

Дефекты

CWE-457