CVE-2026-103500 | Mozilla Thunderbird up to 140.16/153.3/156 heap-based overflow

September 30, 2026 Yanac

A vulnerability identified as critical has been detected in Mozilla Thunderbird up to 140.16/153.3/156. The impacted element is an unknown function. This manipulation causes heap-based buffer overflow.

The identification of this vulnerability is CVE-2026-103500. It is possible to initiate the attack remotely. There is no exploit available.

You should upgrade the affected component.VulDB Recent EntriesRead More