CVE-2026-92238

Опубликовано: 15 сент. 2026

Источник: nvd

CVSS3: 9.8

EPSS Низкий

Описание

A maliciously constructed mail header could lead to multiple fields being parsed as one, or potential memory safety violations. This vulnerability was fixed in Thunderbird 156, Thunderbird 140.16, and Thunderbird 153.3.

Ссылки

https://bugzilla.mozilla.org/show_bug.cgi?id=2060601
Permissions Required
https://www.mozilla.org/security/advisories/mfsa2026-94/
Vendor Advisory
https://www.mozilla.org/security/advisories/mfsa2026-95/
Vendor Advisory
https://www.mozilla.org/security/advisories/mfsa2026-96/
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:mozilla:thunderbird:*:*:*:*:*:*:*:*

Версия до 140.16.0 (исключая)

cpe:2.3:a:mozilla:thunderbird:*:*:*:*:*:*:*:*

Версия от 141.0 (включая) до 153.3.0 (исключая)

cpe:2.3:a:mozilla:thunderbird:*:*:*:*:*:*:*:*

Версия от 154.0 (включая) до 156.0 (исключая)

EPSS

Процентиль: 46%

0.00539

Низкий

9.8 Critical

CVSS3

Дефекты

CWE-444

Связанные уязвимости

CVE-2026-92238

CVSS3: 9.8

ubuntu

около 2 месяцев назад

CVE-2026-92238

CVSS3: 6.1

redhat

около 2 месяцев назад

CVE-2026-92238

CVSS3: 9.8

debian

около 2 месяцев назад

A maliciously constructed mail header could lead to multiple fields be ...

GHSA-w2rw-r9p8-wp72

CVSS3: 9.8

github

около 2 месяцев назад

A maliciously constructed mail header could lead to multiple fields being parsed as one, or potential memory safety violations. This vulnerability was fixed in Thunderbird 156 and Thunderbird 140.16.

RLSA-2026:73971

rocky

около 1 месяца назад

Important: thunderbird security update

EPSS

Процентиль: 46%

0.00539

Низкий

9.8 Critical

CVSS3

Дефекты

CWE-444