CVE-2026-84637

CVE-2026-84637 is a critical (CVSS 9.8) vulnerability in Mozilla Thunderbird where malicious calendar invitations could use file URI attachments to launch local or network-hosted executables on Windows , bypassing Thunderbird's normal executable attachment protections. With the new invitation dis...

PT-2026-84524

Name of the Vulnerable Software and Affected Versions Thunderbird versions prior to 153.2 Thunderbird versions prior to 154 Description Malicious calendar invitations can utilize file URI attachments to execute local or network-hosted executables on Windows systems, bypassing standard executable...