CVE-2026-7322

INFO Priority: 0.00 BB Relevance: 0/100
Published: 2026-04-28 Modified: 2026-10-26 First seen: 2026-10-29 Status: pending_score

Description

Memory safety bugs present in Thunderbird ESR 140.10.0 and Thunderbird 150.0.0. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability was fixed in Firefox 150.0.1, Firefox ESR 140.10.1, Firefox ESR 115.35.1, Thunderbird 150.0.1, and Thunderbird 140.10.1.

Weakness Classification (3)

Affected Software (4)

VendorProductVersion
mozilla firefox < 115.35.1
mozilla firefox < 150.0.1
mozilla thunderbird < 140.10.1
mozilla thunderbird < 150.0.1

References & Advisories (31)

Showing 25 of 31 references

Bug Bounty Relevance

0 / 100

CVSS Score

Unscored

EPSS — Exploitation Probability

0.32%
Raw Score 0.003160
Percentile 24.5%
Date 2026-10-29

EPSS Trend

2026-10-29
0.00316
2026-10-28
0.00316

Intelligence Sources

nvd ref →