CVE-2026-92240— Out-of-bounds read in IMAP response parser
Quick assessment
Affected
Mozilla Thunderbird
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.
恶意或被攻陷的 IMAP 服务器可以通过发送未标记的 响应，触发 IMAP 响应解析器中的越界读取（out-of-bounds read），从而导致 Thunderbird 崩溃。受影响的解析路径在身份验证之前即可触达。该漏洞已在 Thunderbird 140.16 版本中修复。
Possible ATT&CK Techniques 2 AI
T1195 · Supply Chain Compromise T1203 · Exploitation for Client ExecutionAffected Version Matrix 3
| Vendor | Product | Version Range | Status |
|---|---|---|---|
| Mozilla | Thunderbird | 140.16≤ 140.* |
unaffected |
153.3≤ 153.* |
unaffected | ||
156≤ * |
unaffected |
Get alerts for future matching vulnerabilities
Log in to subscribe
I. Basic Information for CVE-2026-92240
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Out-of-bounds read in IMAP response parser
Source: CVE Program / CVE List V5
Vulnerability Description
A malicious or compromised IMAP server can trigger an out-of-bounds read in the IMAP response parser by sending an untagged '* ID' response, crashing Thunderbird. The affected parsing path is reachable before authentication. This vulnerability was fixed in Thunderbird 156, Thunderbird 140.16, and Thunderbird 153.3.
Source: CVE Program / CVE List V5
CVSS Information
N/A
Source: CVE Program / CVE List V5
Vulnerability Type
N/A
Source: CVE Program / CVE List V5
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| Mozilla | Thunderbird | 140.16 ~ 140.* | - |
|
II. Public POCs for CVE-2026-92240
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POC
Premium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2026-92240
请登录查看更多情报信息。
Vendor Advisories for CVE-2026-92240 (1)
Same Patch Batch · Mozilla · 2026-09-15 · 78 CVEs total
| CVE-2026-92038 | Mitigation bypass in the Remote Settings Client component | |
| CVE-2026-92037 | Incorrect boundary conditions in the DOM: Animation component | |
| CVE-2026-92023 | Use-after-free in the XML component | |
| CVE-2026-92035 | Sandbox escape due to incorrect boundary conditions in the Graphics component | |
| CVE-2026-92034 | Site isolation issue in the Graphics component | |
| CVE-2026-92036 | Incorrect boundary conditions in the Networking: HTTP component | |
| CVE-2026-92039 | Mitigation bypass in the DOM: Notifications component | |
| CVE-2026-92040 | Use-after-free in the JavaScript: WebAssembly component | |
| CVE-2026-92041 | Mitigation bypass in the DOM: Networking component | |
| CVE-2026-92042 | Race condition in the DOM: Content Processes component | |
| CVE-2026-92033 | Privilege escalation in Firefox for Android | |
| CVE-2026-92032 | Sandbox escape due to invalid pointer in the Graphics component | |
| CVE-2026-92031 | Information disclosure in the Graphics: ImageLib component | |
| CVE-2026-92030 | Mitigation bypass in the DOM: Copy & Paste and Drag & Drop component | |
| CVE-2026-92029 | Use-after-free in the SVG component | |
| CVE-2026-92028 | Use-after-free in the DOM: Core & HTML component | |
| CVE-2026-92027 | Use-after-free in the DOM: Streams component | |
| CVE-2026-92026 | Use-after-free in the Networking component | |
| CVE-2026-92025 | Use-after-free in the DOM: Navigation component | |
| CVE-2026-92024 | Use-after-free in the SVG component |
Showing top 20 of 78 CVEs. View all on vendor page → →
IV. Related Vulnerabilities
Same product: Thunderbird
V. Comments for CVE-2026-92240
No comments yet