CVE-2026-84641

A use-after-free in Mozilla Thunderbird's IMAP ID response handling allows a malicious IMAP server to trigger heap-memory disclosure. The leaked heap contents can ultimately be persisted to prefs.js , enabling an attacker to recover sensitive data without user interaction. The vulnerability carri...

CVE-2026-84641 Information disclosure due to malicious IMAP server response

A malicious IMAP server can trigger use-after-free and heap-memory disclosure by sending a crafted ID response. Heap contents can ultimately be persisted to prefs.js. This vulnerability was fixed in Thunderbird 155, Thunderbird 140.15, and Thunderbird 153.2...

CVE-2026-84642 Allowed UNC hostnames for attachments interpreted as a regular expression

The values of the mail.allowedattachmenthostnames advanced config setting were used in a regular expression without escaping. For some possible valid hostnames, this could allow certain unintended hostnames to also match and serve remote attachments. This vulnerability was fixed in Thunderbird 15...

CVE-2026-84642 Allowed UNC hostnames for attachments interpreted as a regular expression

The values of the mail.allowedattachmenthostnames advanced config setting were used in a regular expression without escaping. For some possible valid hostnames, this could allow certain unintended hostnames to also match and serve remote attachments. This vulnerability was fixed in Thunderbird 15...

CVE-2026-84639 Uninitialized memory in MIME parsing

Triggering an error condition in certain MIME bodies would cause uninitialized memory to be used. This vulnerability was fixed in Thunderbird 155, Thunderbird 140.15, and Thunderbird 153.2...

CVE-2026-84640 One byte overflow read in mail parser

A maliciously constructed mail header could lead to a one byte read past the end of a buffer. This vulnerability was fixed in Thunderbird 155, Thunderbird 140.15, and Thunderbird 153.2...

CVE-2026-84640 One byte overflow read in mail parser

A maliciously constructed mail header could lead to a one byte read past the end of a buffer. This vulnerability was fixed in Thunderbird 155, Thunderbird 140.15, and Thunderbird 153.2...

CVE-2026-84640

CVE-2026-84640 is a one-byte buffer over-read in the mail header parser of Mozilla Thunderbird, triggered by a maliciously constructed mail header. The vulnerability is rated CVSS 3.1 7.5 (HIGH) with a vector of AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N , indicating a network-exploitable flaw requiring...

CVE-2026-84639

CVE-2026-84639 affects Mozilla Thunderbird 's MIME parsing component. Triggering an error condition in certain MIME bodies causes uninitialized memory to be used , leading to a remote denial-of-service as noted by Kaspersky. The CVSS 3.1 score is 9.1 (Critical) with a network attack vector, low c...

webanalyze v0.4.5

webanalyze This is a port of Wappalyzer in Go. This tool is designed to be performant and allows to test huge lists of hosts. !NOTE Because Wappalyzer removed the public access to their app definitions, webanalyze currently loads definitions from enthec. Installation and usage Precompiled release...

CVE-2026-84637 Calendar invitation attachments could launch local executables

Malicious calendar invitations could use file URI attachments to launch local or network-hosted executables on Windows, bypassing Thunderbird's normal executable attachment protections. With the new invitation display enabled, the attachment could also appear under a misleading filename. This...

CVE-2026-84637 Calendar invitation attachments could launch local executables

Malicious calendar invitations could use file URI attachments to launch local or network-hosted executables on Windows, bypassing Thunderbird's normal executable attachment protections. With the new invitation display enabled, the attachment could also appear under a misleading filename. This...

CVE-2026-84637

CVE-2026-84637 is a critical (CVSS 9.8) vulnerability in Mozilla Thunderbird where malicious calendar invitations could use file URI attachments to launch local or network-hosted executables on Windows , bypassing Thunderbird's normal executable attachment protections. With the new invitation dis...

Security Bulletin: Multiple security vulnerabilities are addressed with IBM Cloud Pak for Business Automation iFixes for August 2026.

Summary In addition to many updates of operating system level packages, the following security vulnerabilities are addressed with IBM Cloud Pak for Business Automation released in August 2026. Vulnerability Details CVEID:CVE-2026-12590 DESCRIPTION: Impact: In body-parser versions prior to 1.20.6...

CVE-2026-84121

creationtimestamp| type| source ---|---|--- 2026-09-01 16:07:50+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3muhsjgnirh2d 2026-09-01 16:10:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3muhsnh3o522w 2026-09-02 04:48:45+00:00| seen|...

CVE-2026-84119

creationtimestamp| type| source ---|---|--- 2026-09-01 16:07:41+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3muhsj64ubf2y 2026-09-01 16:20:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3muht7ces3x2l 2026-09-02 04:48:49+00:00| seen|...

CVE-2026-84125

creationtimestamp| type| source ---|---|--- 2026-09-01 13:21:41+00:00| seen| https://infosec.exchange/users/vuldb/statuses/117195990705860524 2026-09-02 04:48:36+00:00| seen| https://www.hkcert.org/security-bulletin/mozilla-products-multiple-vulnerabilities20260902...

CVE-2026-84131

A flaw was found in Firefox. The Mozilla Foundation's Security Advisory describes the following issue: Privilege escalation due to invalid pointer in the Graphics component...

CVE-2026-84120

A flaw was found in Firefox. The Mozilla Foundation's Security Advisory describes the following issue: Use-after-free in the Audio/Video component...

CVE-2026-84144 Internally found bugs fixed in Thunderbird 155 and Thunderbird ESR 153.2

Internally found bugs present in Thunderbird 154 and Thunderbird ESR 153.1. Some of these bugs showed evidence of memory corruption or another security-relevant defect and we presume that with enough effort some of these could have been exploited. This vulnerability was fixed in Firefox 155,...