CVE-2026-14899 | Mozilla Thunderbird up to 140.12/152 MIME Header Parsing off-by-one

July 22, 2026 Yanac

A vulnerability identified as critical has been detected in Mozilla Thunderbird up to 140.12/152. Affected is an unknown function of the component MIME Header Parsing. This manipulation causes off-by-one.

This vulnerability is tracked as CVE-2026-14899. The attack is possible to be carried out remotely. No exploit exists.

You should upgrade the affected component.VulDB Recent EntriesRead More