Threats tagged 'ghsa-wq87-gp3m-ww5v'

1 threat

Severity	CVSS	Signals	Threat	Source	Published	Score and star
Critical	9.1	EPSS 0.6%	CVE-2026-92240Mozjs52 · A malicious or compromised IMAP server can trigger an out-of-bounds read in the IMAP response parser by sending an untagged ' ID' response, crashing Critical9.1EPSS 0.6%2026-09-15GCVE DatabaseCVE-2026-92240 CVE-2026-92240 is an out-of-bounds read vulnerability in the IMAP response parser of Thunderbird's mozjs52 component. A malicious or compromised IMAP server can send an untagged '* ID' response to trigger this vulnerability, causing Thunderbird to crash. The vulnerable code path is reachable before user authentication. This issue was fixed in Thunderbird versions 156, 140.16, and 153.3. EPSS 0.6%Report on CVE-2026-92240 Vulnerability #ghsa-wq87-gp3m-ww5v	GCVE Database	2026-09-15

Page 1 of 1