CVE-2026-103500

An attacker could cause a heap buffer overflow by getting a user to open an email that is greater than or equal to 2GB in size. This vulnerability was fixed in Thunderbird 157, Thunderbird 140.17, and Thunderbird 153.4.

• https://bugzilla.mozilla.org/show_bug.cgi?id=2070267
• https://www.mozilla.org/security/advisories/mfsa2026-101/
• https://www.mozilla.org/security/advisories/mfsa2026-102/
• https://www.mozilla.org/security/advisories/mfsa2026-103/

Published

Sep 30, 2026

Last Modified

Sep 30, 2026

Status

Awaiting Analysis

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-103493In JetBrains YouTrack before 2026.2.19422 stored XSS via Mer…8.1
• CVE-2026-103494In JetBrains YouTrack before 2026.2.19422 privilege escalati…6.6
• CVE-2026-103495In JetBrains YouTrack before 2026.2.19422 missing authorisat…4.3
• CVE-2026-103496In JetBrains YouTrack before 2026.2.19422 iDOR in inbox thre…5.4
• CVE-2026-103497In JetBrains YouTrack before 2026.2.19422 sSRF was possible …5.5
• CVE-2026-1035A flaw was found in the Keycloak server during refresh token…3.1
• CVE-2026-103505Improper neutralization of argument delimiters in the volume…6.5
• CVE-2026-103530A vulnerability was detected in decolua 9Router up to 0.5.55…7.3
• CVE-2026-103531A flaw has been found in OpenSC up to 0.27.1. The impacted e…5.5
• CVE-2026-103532A vulnerability has been found in immich-app Immich up to 2.…5.3
• CVE-2026-103533A vulnerability was found in David-Crty databasement up to 1…4.1
• CVE-2026-103534A vulnerability was determined in David-Crty databasement up…6.3