CVE-2026-84640

CVE-2026-84640 is a one-byte out-of-bounds read in the mail parser of Mozilla Thunderbird . A maliciously constructed mail header can trigger a read past the end of a buffer. The vulnerability was fixed in Thunderbird 155 . No exploitation details are provided in the available documents, so the p...