PT-2026-84524
CVE-2026-84637
·
تاريخ النشر
2026-09-01
·
تاريخ التحديث
2026-10-10
الوصف من
CVSS 3.1
9.8
حرجةالمقاييسAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions
Thunderbird versions prior to 153.2
Thunderbird versions prior to 154
Description
Malicious calendar invitations can utilize file URI attachments to execute local or network-hosted executables on Windows systems, bypassing standard executable attachment protections. When the new invitation display is enabled, these attachments may be presented with misleading filenames.
Recommendations
Update to version 153.2.
Update to version 154.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾