Yüksek CVSS 7.5
CVE-2026-14899: Thunderbird: güvenlik açığı
Açıklama (NVD)
The code to parse MIME headers for display when forwarding a message (if the setting to view all headers was enabled) had an off-by-one error, allowing a single byte to be read from the memory after the buffer for the headers, and potentially crashing Thunderbird. This vulnerability was fixed in Thunderbird 153 and Thunderbird 140.13.
Özet bilgiler
- Ürün
- Mozilla Thunderbird
- CVSS v3.1
- 7.5
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N - EPSS
- %0,47 (yüzdelik 41)
- CWE
- CWE-193
- Yama
- Yok / bilinmiyor
Etkilenen sürümler
| Ürün | Başlangıç | Bitiş | Düzeltildi |
|---|---|---|---|
| mozilla-thunderbird | — | — | 140.13.0 |