CVE-2026-14899

CVE-2026-14899 describes an off-by-one read in Thunderbird’s MIME header parser when forwarding with the “view all headers” option enabled, allowing reading a byte beyond the header buffer and potentially crashing Thunderbird. The issue is fixed in Thunderbird 153 and Thunderbird 140.13. This ana...