CVE-2026-84637

This vulnerability affects Mozilla Thunderbird on Windows , where malicious calendar invitations could use file URI attachments to launch local or network-hosted executables, bypassing Thunderbird's normal executable attachment protections. With the new invitation display enabled, the attachment ...