CVE-2026-118177 | Mozilla Thunderbird up to 153.5/158 Calendar Subscription input validation

October 27, 2026 Yanac

A vulnerability classified as critical has been found in Mozilla Thunderbird up to 153.5/158. This affects an unknown function of the component Calendar Subscription. Performing a manipulation results in improper input validation.

This vulnerability is known as CVE-2026-118177. Remote exploitation of the attack is possible. No exploit is available.

It is recommended to upgrade the affected component.VulDB Recent EntriesRead More