-
CVE-2026-103500
- EPSS 0.21%
- Veröffentlicht 30.09.2026 17:15:06
- Zuletzt bearbeitet 30.09.2026 19:05:23
- Erkennungen
Heap buffer overflow opening large email
An attacker could cause a heap buffer overflow by getting a user to open an email that is greater than or equal to 2GB in size. This vulnerability was fixed in Thunderbird 157, Thunderbird 140.17, and Thunderbird 153.4.
Daten sind bereitgestellt durch das CVE Programm von einer CVE Numbering Authority (CNA) (Unstrukturiert).
HerstellerMozilla
≫
Produkt
Thunderbird
Version <=
140.*
Version
140.17
Status
unaffected
Version <=
153.*
Version
153.4
Status
unaffected
Version <=
*
Version
157
Status
unaffected
VulnDex Vulnerability Enrichment
Diese Information steht angemeldeten Benutzern zur Verfügung. 
Login
Login| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 0.21% | 0.096 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|
https://bugzilla.mozilla.org/show_bug.cgi?id=2070267
https://www.mozilla.org/security/advisories/mfsa2026-101/
https://www.mozilla.org/security/advisories/mfsa2026-102/
https://www.mozilla.org/security/advisories/mfsa2026-103/