CVE-2026-57963

The Thunderbird email client is vulnerable to a chat UI manipulation flaw where an attacker sending HTML chat messages (via Matrix or XMPP ) can inject arbitrary styled content , phishing links , and CSS to manipulate the chat interface. This issue was addressed in versions 152.0.1 and 140.12.1 ....