CVE-2026-84642 | Mozilla Thunderbird up to 153.1/154 Attachment Hostname Matching incorrect regex

September 1, 2026 Yanac

A vulnerability, which was classified as critical, has been found in Mozilla Thunderbird up to 153.1/154. Affected by this issue is some unknown functionality of the component Attachment Hostname Matching. The manipulation leads to incorrect regular expression.

This vulnerability is uniquely identified as CVE-2026-84642. The attack is possible to be carried out remotely. No exploit exists.

It is advisable to upgrade the affected component.VulDB Recent EntriesRead More