CVE-2026-57962 – Denial-of-service via malicious LDAP address-book server

CVE ID :CVE-2026-57962

Published : July 1, 2026, 12:58 a.m. | 47 minutes ago

Description :A malicious LDAP server, which a Thunderbird user is configured to query for address-book autocomplete, can stash arbitrarily large amounts of attacker-supplied data into the Thunderbird LDAP client until it crashes due to memory exhaustion. This vulnerability was fixed in Thunderbird 152.0.1 and Thunderbird 140.12.1.

Severity: 0.0 | NA

Visit the link for more details, such as CVSS details, affected products, timeline, and more…