CVE-2026-92240

A malicious or compromised IMAP server can trigger an out-of-bounds read in the IMAP response parser in Thunderbird by sending an untagged * ID response, causing the application to crash. The affected parsing path is reachable before authentication , broadening the attack surface. The vulnerabili...