CVE-2026-84142
critical · 9.8Internally found bugs present in Thunderbird 154. Some of these bugs showed evidence of memory corruption or another security-relevant defect and we presume that with enough effort some of these could have been exploited. This vulnerability was fixed in Firefox 155 and Thunderbird 155.
9.8
CVSS
0.6%
EPSS (exploit prob.)
46th
EPSS percentile
2026-09-01
Published
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Weaknesses
CWE-119CWE-200
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| mozilla | firefox | < 155.0.0 |
| mozilla | thunderbird | < 155.0 |
Check a specific version with /api/v1/cve/match.
References
- https://bugzilla.mozilla.org/buglist.cgi?bug_id=2029421%2C2040889%2C2045313%2C2045435%2C2053578%2C2058621%2C2058626
- https://bugzilla.mozilla.org/buglist.cgi?bug_id=2048796%2C2053150%2C2057356
- https://www.mozilla.org/security/advisories/mfsa2026-82/
- https://www.mozilla.org/security/advisories/mfsa2026-86/
Query this programmatically:
curl https://evil-db.io/api/v1/cve/CVE-2026-84142