CVE-2026-92239
published 2026-09-15CVE-2026-92239: A maliciously constructed IMAP line could cause an out-of-bounds buffer read. This vulnerability was fixed in Thunderbird 156, Thunderbird 140.16, and…
PriorityP340high8.1CVSS 3.1
AVNACLPRNUIRSUCHINAH
EPSS
0.41%
33.3th percentile
A maliciously constructed IMAP line could cause an out-of-bounds buffer read. This vulnerability was fixed in Thunderbird 156, Thunderbird 140.16, and Thunderbird 153.3.
Affected
8 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| mozilla | thunderbird | < Thunderbird 153.3 | Thunderbird 153.3 |
| mozilla | thunderbird | < Thunderbird 156 | Thunderbird 156 |
| mozilla | thunderbird | < Thunderbird 140.16 | Thunderbird 140.16 |
| mozilla | thunderbird | < 140.16.0 | 140.16.0 |
| mozilla | thunderbird | — | — |
| mozilla | thunderbird | >= 141.0 < 153.3.0 | 153.3.0 |
| mozilla | thunderbird | >= 154.0 < 156.0 | 156.0 |
| rhel10 | thunderbird-flatpak | — | — |
CVSS provenance
nvdv3.18.1HIGHCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H
vendor_redhat6.1MEDIUM
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Red Hat
thunderbird: Thunderbird: Out-of-bounds read via maliciously constructed IMAP line
vendor_redhat·2026-09-15·CVSS 6.1
CVE-2026-92239 [MEDIUM] CWE-125 thunderbird: Thunderbird: Out-of-bounds read via maliciously constructed IMAP line
thunderbird: Thunderbird: Out-of-bounds read via maliciously constructed IMAP line
A maliciously constructed IMAP line could cause an out-of-bounds buffer read. This vulnerability was fixed in Thunderbird 156, Thunderbird 140.16, and Thunderbird 153.3.
A flaw was found in Thunderbird. A remote attacker could exploit this vulnerability by sending a maliciously constructed Internet Message Access Protocol (IMAP) line. This could lead to an out-of-bounds buffer read, potentially resulting in information disclosure or a denial of service.
Package: rhel10/thunderbird-flatpak (Red Hat Enterprise Linux 10) - Affected
Package: thunderbird (Red Hat Enterprise Linux 10) - Affected
Package: thunderbird (Red Hat Enterprise Linux 6) - Out of support scope
Package: thunderbird (Red Hat Enterprise
Mozilla
Mozilla Foundation Security Advisory 2026-96: CVE-2026-92239
vendor_mozilla
CVE-2026-92239 Mozilla Foundation Security Advisory 2026-96: CVE-2026-92239
Mozilla Foundation Security Advisory 2026-96
CVE: CVE-2026-92239
Product: Thunderbird
Impact: low
Fixed in: Thunderbird 153.3
Mozilla
Mozilla Foundation Security Advisory 2026-94: CVE-2026-92239
vendor_mozilla
CVE-2026-92239 Mozilla Foundation Security Advisory 2026-94: CVE-2026-92239
Mozilla Foundation Security Advisory 2026-94
CVE: CVE-2026-92239
Product: Thunderbird
Impact: low
Fixed in: Thunderbird 156
Mozilla
Mozilla Foundation Security Advisory 2026-95: CVE-2026-92239
vendor_mozilla
CVE-2026-92239 Mozilla Foundation Security Advisory 2026-95: CVE-2026-92239
Mozilla Foundation Security Advisory 2026-95
CVE: CVE-2026-92239
Product: Thunderbird
Impact: moderate
Fixed in: Thunderbird 140.16
GHSA
A maliciously constructed IMAP line could cause an out-of-bounds buffer read.
ghsa_unreviewed·2026-09-15
CVE-2026-92239 A maliciously constructed IMAP line could cause an out-of-bounds buffer read.
A maliciously constructed IMAP line could cause an out-of-bounds buffer read. This vulnerability was fixed in Thunderbird 156 and Thunderbird 140.16.
No detection rules found.
No public exploits indexed.
2026-09-15
Published