Unrated severityNVD Advisory· Published Sep 15, 2026

CVE-2026-92238

Description

A maliciously constructed mail header could lead to multiple fields being parsed as one, or potential memory safety violations. This vulnerability was fixed in Thunderbird 156 and Thunderbird 140.16.

Affected products

Mozilla Corporation/Thunderbirdllm-fuzzy
Range: before 156 and before 140.16

Patches

Vulnerability mechanics

References

bugzilla.mozilla.org/show_bug.cginvd
www.mozilla.org/security/advisories/mfsa2026-94/nvd
www.mozilla.org/security/advisories/mfsa2026-95/nvd

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000