CVE-2026-3889
Spoofing issue in Thunderbird.
Published Mar 24, 2026 · updated Jun 17, 2026 · mozilla thunderbird
Spoofing issue in Thunderbird. This vulnerability was fixed in Thunderbird 149 and Thunderbird 140.9.
Code
The project this record applies to. Exploit listings stay in References.
No public source repository is identified for this product.
Timeline
Detection, updates, and resolution for this record.
Mar 24, 2026 · NIST NVD
Detected
Spoofing issue in Thunderbird. This vulnerability was fixed in Thunderbird 149 and Thunderbird 140.9.
Jun 17, 2026 · NIST NVD
Updated
Spoofing issue in Thunderbird. This vulnerability was fixed in Thunderbird 149 and Thunderbird 140.9.
Affected
- cpe mozilla/thunderbirdversion unspecified
Sources
- CVE.orgVulnerability recordCVE-2026-3889
Official CVE identifier
cve.org - NIST NVDVulnerability recordCVE-2026-3889
Spoofing issue in Thunderbird. This vulnerability was fixed in Thunderbird 149 and Thunderbird 140.9.
nvd.nist.gov