Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2026-84640

Опубликовано: 01 сент. 2026
Источник: nvd
CVSS3: 7.5
EPSS Низкий

Описание

A maliciously constructed mail header could lead to a one byte read past the end of a buffer. This vulnerability was fixed in Thunderbird 155, Thunderbird 140.15, and Thunderbird 153.2.

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:mozilla:thunderbird:*:*:*:*:*:*:*:*
Версия до 140.15.0 (исключая)
cpe:2.3:a:mozilla:thunderbird:*:*:*:*:*:*:*:*
Версия от 141.0 (включая) до 153.2.0 (исключая)
cpe:2.3:a:mozilla:thunderbird:*:*:*:*:*:*:*:*
Версия от 154.0 (включая) до 155.0 (исключая)

EPSS

Процентиль: 18%
0.00263
Низкий

7.5 High

CVSS3

Дефекты

CWE-126

Связанные уязвимости

CVSS3: 7.5
ubuntu
2 месяца назад

A maliciously constructed mail header could lead to a one byte read past the end of a buffer. This vulnerability was fixed in Thunderbird 155, Thunderbird 140.15, and Thunderbird 153.2.

CVSS3: 6.1
redhat
2 месяца назад

A maliciously constructed mail header could lead to a one byte read past the end of a buffer. This vulnerability was fixed in Thunderbird 155, Thunderbird 140.15, and Thunderbird 153.2.

CVSS3: 7.5
debian
2 месяца назад

A maliciously constructed mail header could lead to a one byte read pa ...

CVSS3: 7.5
github
2 месяца назад

A maliciously constructed mail header could lead to a one byte read past the end of a buffer. This vulnerability was fixed in Thunderbird 155, Thunderbird 140.15, and Thunderbird 153.2.

CVSS3: 9.8
altlinux
2 месяца назад

ALT-PU-2026-14614: package `thunderbird` update to version 155.0-alt1

EPSS

Процентиль: 18%
0.00263
Низкий

7.5 High

CVSS3

Дефекты

CWE-126