CVE-2026-7323

INFO Priority: 0.00 BB Relevance: 0/100
Published: 2026-04-28 Modified: 2026-10-26 First seen: 2026-10-29 Status: pending_score

Description

Memory safety bugs present in Thunderbird ESR 140.10.0 and Thunderbird 150.0.0. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability was fixed in Firefox 150.0.1, Firefox ESR 140.10.1, Thunderbird 150.0.1, and Thunderbird 140.10.1.

Weakness Classification (2)

Affected Software (4)

VendorProductVersion
mozilla firefox < 140.10.1
mozilla firefox < 150.0.1
mozilla thunderbird < 140.10.1
mozilla thunderbird < 150.0.1

Bug Bounty Relevance

0 / 100

CVSS Score

Unscored

EPSS — Exploitation Probability

0.38%
Raw Score 0.003750
Percentile 31.4%
Date 2026-10-29

EPSS Trend

2026-10-29
0.00375
2026-10-28
0.00375

Intelligence Sources

nvd ref →