Threats Tagged 'cve-2026-92240'
View all threats tagged with 'cve-2026-92240'. Filter and sort to focus on specific types of threats.
Stop chasing alerts. Route them.
Start free, then upgrade once to turn Radar into an automated delivery engine for your security stack.
Custom feeds / Automations: email, Slack, webhooks, SIEM/MISP / API access (baseline limits)
API access activates after upgrading in Console -> Billing.
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.
Filter Threats
Narrow down the results by type, severity, or affected countries
Threats Tagged 'cve-2026-92240'
Click on any threat for detailed analysis and mitigation recommendations
CVE-2026-92240 is an out-of-bounds read vulnerability in the IMAP response parser of Thunderbird. A malicious or compromised IMAP server can send an untagged '* ID' response that triggers this vulnerability, causing Thunderbird to crash. This parsing path is reachable before user authentication. The issue was fixed in Thunderbird versions 156 and 140.16. Exploitation through email is generally not possible because scripting is disabled when reading mail in Thunderbird, but risks may exist in browser or browser-like contexts. Join the discussion | GCVE Database | 09/15/2026, 21:33:03 UTC Added: 09/16/2026, 03:07:00 UTC |
0 A malicious or compromised IMAP server can trigger an out-of-bounds read in the IMAP response parser by sending an untagged '* ID' response, crashing Thunderbird. The affected parsing path is reachable before authentication. This vulnerability was fixed in Thunderbird 156 and Thunderbird 140.16. Join the discussion | CVE Database V5 | 09/15/2026, 19:42:53 UTC Added: 09/15/2026, 19:47:09 UTC |
Showing 1 to 2 of 2 results