CVE-2026-84641

A flaw was found in Thunderbird. A remote attacker, by operating a malicious Internet Message Access Protocol IMAP server, could send a specially crafted ID response. This could trigger a use-after-free vulnerability and lead to heap-memory disclosure, allowing sensitive heap contents to be...