Unrated severityNVD Advisory· Published Sep 1, 2026

CVE-2026-84639

Description

Triggering an error condition in certain MIME bodies would cause uninitialized memory to be used. This vulnerability was fixed in Thunderbird 155, Thunderbird 140.15, and Thunderbird 153.2.

Affected products

Mozilla Corporation/Thunderbirdllm-fuzzy
Range: before 155, before 140.15, before 153.2

Patches

Vulnerability mechanics

References

bugzilla.mozilla.org/show_bug.cginvd
www.mozilla.org/security/advisories/mfsa2026-86/nvd
www.mozilla.org/security/advisories/mfsa2026-87/nvd
www.mozilla.org/security/advisories/mfsa2026-88/nvd

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000