{"schema":"vulnpedia.research/1","cve":"CVE-2026-113869","generated":"2026-10-26T13:52:32.101Z","references":[{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=2075530","tags":["vendor-reference"],"source":"mitre","sourceId":"mozilla","modified":"2026-10-20T19:14:55.862Z","origins":[{"source":"mitre","sourceId":"mozilla","modified":"2026-10-20T19:14:55.862Z","url":"https://bugzilla.mozilla.org/show_bug.cgi?id=2075530"},{"source":"nvd","sourceId":"CVE-2026-113869","modified":"2026-10-22T17:36:46.950","url":"https://bugzilla.mozilla.org/show_bug.cgi?id=2075530"},{"source":"redhat","sourceId":"CVE-2026-113869","modified":"2026-10-20T21:31:08+00:00","url":"https://bugzilla.mozilla.org/show_bug.cgi?id=2075530"}]},{"url":"https://www.mozilla.org/security/advisories/mfsa2026-114/","tags":["vendor-reference"],"source":"mitre","sourceId":"mozilla","modified":"2026-10-20T19:14:55.862Z","origins":[{"source":"mitre","sourceId":"mozilla","modified":"2026-10-20T19:14:55.862Z","url":"https://www.mozilla.org/security/advisories/mfsa2026-114/"},{"source":"nvd","sourceId":"CVE-2026-113869","modified":"2026-10-22T17:36:46.950","url":"https://www.mozilla.org/security/advisories/mfsa2026-114/"},{"source":"redhat","sourceId":"CVE-2026-113869","modified":"2026-10-20T21:31:08+00:00","url":"https://www.mozilla.org/security/advisories/mfsa2026-114/"}]},{"url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-113869.json","tags":["vendor-advisory"],"source":"redhat","sourceId":"CVE-2026-113869","modified":"2026-10-20T21:31:08+00:00","origins":[{"source":"redhat","sourceId":"CVE-2026-113869","modified":"2026-10-20T21:31:08+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-113869.json"}]},{"url":"https://access.redhat.com/security/cve/CVE-2026-113869","tags":["vendor-reference"],"source":"redhat","sourceId":"CVE-2026-113869","modified":"2026-10-20T21:31:08+00:00","origins":[{"source":"redhat","sourceId":"CVE-2026-113869","modified":"2026-10-20T21:31:08+00:00","url":"https://access.redhat.com/security/cve/CVE-2026-113869"}]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2556402","tags":["vendor-reference"],"source":"redhat","sourceId":"CVE-2026-113869","modified":"2026-10-20T21:31:08+00:00","origins":[{"source":"redhat","sourceId":"CVE-2026-113869","modified":"2026-10-20T21:31:08+00:00","url":"https://bugzilla.redhat.com/show_bug.cgi?id=2556402"}]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-113869","tags":["vendor-reference"],"source":"redhat","sourceId":"CVE-2026-113869","modified":"2026-10-20T21:31:08+00:00","origins":[{"source":"redhat","sourceId":"CVE-2026-113869","modified":"2026-10-20T21:31:08+00:00","url":"https://www.cve.org/CVERecord?id=CVE-2026-113869"}]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-113869","tags":["vendor-reference"],"source":"redhat","sourceId":"CVE-2026-113869","modified":"2026-10-20T21:31:08+00:00","origins":[{"source":"redhat","sourceId":"CVE-2026-113869","modified":"2026-10-20T21:31:08+00:00","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-113869"}]},{"source":"euvd","sourceId":"EUVD-2026-105296","url":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-105296","tags":["ADVISORY"],"origins":[{"source":"euvd","sourceId":"EUVD-2026-105296","url":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-105296"}]}],"packages":[],"pocCandidates":[],"cataloguedPoc":[],"vendorStatements":[{"source":"redhat","sourceId":"CVE-2026-113869","modified":"2026-10-20T21:31:08+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-113869.json","productId":"red_hat_enterprise_linux_10:thunderbird","product":"thunderbird as a component of Red Hat Enterprise Linux 10","status":"known_affected","remediations":[{"category":"workaround","details":"--- CME Mitigation Guidance (2026-10-20) ---\nDisclaimer: The following mitigation solutions are provided as a courtesy, pending the application of an official patch. This content was generated utilizing AI tools in conjunction with data from https://cmetaxonomy.org. Customers are advised to independently evaluate and test these temporary mitigations within their own infrastructure.\n\nThe highest-value action is to prevent premature deallocation of the S/MIME message decoder when message loading completes or is canceled while an interactive password prompt is open: upgrade to Thunderbird 158.0.1 (or the fixed Thunderbird builds), which prevents freeing the message decoder while it remains in use during active S/MIME security device password prompts, closing S/MIME encrypted message delivery triggering an interactive password prompt. Until patched, this is a concern on Thunderbird installations opening S/MIME encrypted messages across all supported platforms, so exercise caution when opening untrusted S/MIME messages and avoid canceling message load operations while smartcard PIN or Primary Password prompt dialogs are displayed. As a compensating measure, maintain Address Space Layout Randomization to randomize Thunderbird process memory and impede gadget predictability, deploy Endpoint Detection and Response agents to detect behavioral anomalies and post-exploitation activity, and enforce Non-Executable Memory (NX/XD bit) protections to block code execution from corrupted heap and data pages. These controls limit blast radius and contain exploitation, but they do not fix the underlying use-after-free defect — apply the upstream patch to fully remediate.\n\nHighest-impact CME: CME-101 ASLR (Address Space Layout Randomization) (medium)"},{"category":"none_available","details":"Affected"}],"purl":"pkg:rpm/redhat/thunderbird","origins":[{"source":"redhat","sourceId":"CVE-2026-113869","modified":"2026-10-20T21:31:08+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-113869.json"}]},{"source":"redhat","sourceId":"CVE-2026-113869","modified":"2026-10-20T21:31:08+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-113869.json","productId":"red_hat_enterprise_linux_10:thunderbird.src","product":"thunderbird.src as a component of Red Hat Enterprise Linux 10","status":"known_affected","remediations":[{"category":"workaround","details":"--- CME Mitigation Guidance (2026-10-20) ---\nDisclaimer: The following mitigation solutions are provided as a courtesy, pending the application of an official patch. This content was generated utilizing AI tools in conjunction with data from https://cmetaxonomy.org. Customers are advised to independently evaluate and test these temporary mitigations within their own infrastructure.\n\nThe highest-value action is to prevent premature deallocation of the S/MIME message decoder when message loading completes or is canceled while an interactive password prompt is open: upgrade to Thunderbird 158.0.1 (or the fixed Thunderbird builds), which prevents freeing the message decoder while it remains in use during active S/MIME security device password prompts, closing S/MIME encrypted message delivery triggering an interactive password prompt. Until patched, this is a concern on Thunderbird installations opening S/MIME encrypted messages across all supported platforms, so exercise caution when opening untrusted S/MIME messages and avoid canceling message load operations while smartcard PIN or Primary Password prompt dialogs are displayed. As a compensating measure, maintain Address Space Layout Randomization to randomize Thunderbird process memory and impede gadget predictability, deploy Endpoint Detection and Response agents to detect behavioral anomalies and post-exploitation activity, and enforce Non-Executable Memory (NX/XD bit) protections to block code execution from corrupted heap and data pages. These controls limit blast radius and contain exploitation, but they do not fix the underlying use-after-free defect — apply the upstream patch to fully remediate.\n\nHighest-impact CME: CME-101 ASLR (Address Space Layout Randomization) (medium)"},{"category":"none_available","details":"Affected"}],"purl":"pkg:rpm/redhat/thunderbird?arch=src","origins":[{"source":"redhat","sourceId":"CVE-2026-113869","modified":"2026-10-20T21:31:08+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-113869.json"}]},{"source":"redhat","sourceId":"CVE-2026-113869","modified":"2026-10-20T21:31:08+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-113869.json","productId":"red_hat_enterprise_linux_8:thunderbird","product":"thunderbird as a component of Red Hat Enterprise Linux 8","status":"known_affected","remediations":[{"category":"workaround","details":"--- CME Mitigation Guidance (2026-10-20) ---\nDisclaimer: The following mitigation solutions are provided as a courtesy, pending the application of an official patch. This content was generated utilizing AI tools in conjunction with data from https://cmetaxonomy.org. Customers are advised to independently evaluate and test these temporary mitigations within their own infrastructure.\n\nThe highest-value action is to prevent premature deallocation of the S/MIME message decoder when message loading completes or is canceled while an interactive password prompt is open: upgrade to Thunderbird 158.0.1 (or the fixed Thunderbird builds), which prevents freeing the message decoder while it remains in use during active S/MIME security device password prompts, closing S/MIME encrypted message delivery triggering an interactive password prompt. Until patched, this is a concern on Thunderbird installations opening S/MIME encrypted messages across all supported platforms, so exercise caution when opening untrusted S/MIME messages and avoid canceling message load operations while smartcard PIN or Primary Password prompt dialogs are displayed. As a compensating measure, maintain Address Space Layout Randomization to randomize Thunderbird process memory and impede gadget predictability, deploy Endpoint Detection and Response agents to detect behavioral anomalies and post-exploitation activity, and enforce Non-Executable Memory (NX/XD bit) protections to block code execution from corrupted heap and data pages. These controls limit blast radius and contain exploitation, but they do not fix the underlying use-after-free defect — apply the upstream patch to fully remediate.\n\nHighest-impact CME: CME-101 ASLR (Address Space Layout Randomization) (medium)"},{"category":"none_available","details":"Affected"}],"purl":"pkg:rpm/redhat/thunderbird","origins":[{"source":"redhat","sourceId":"CVE-2026-113869","modified":"2026-10-20T21:31:08+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-113869.json"}]},{"source":"redhat","sourceId":"CVE-2026-113869","modified":"2026-10-20T21:31:08+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-113869.json","productId":"red_hat_enterprise_linux_8:thunderbird.src","product":"thunderbird.src as a component of Red Hat Enterprise Linux 8","status":"known_affected","remediations":[{"category":"workaround","details":"--- CME Mitigation Guidance (2026-10-20) ---\nDisclaimer: The following mitigation solutions are provided as a courtesy, pending the application of an official patch. This content was generated utilizing AI tools in conjunction with data from https://cmetaxonomy.org. Customers are advised to independently evaluate and test these temporary mitigations within their own infrastructure.\n\nThe highest-value action is to prevent premature deallocation of the S/MIME message decoder when message loading completes or is canceled while an interactive password prompt is open: upgrade to Thunderbird 158.0.1 (or the fixed Thunderbird builds), which prevents freeing the message decoder while it remains in use during active S/MIME security device password prompts, closing S/MIME encrypted message delivery triggering an interactive password prompt. Until patched, this is a concern on Thunderbird installations opening S/MIME encrypted messages across all supported platforms, so exercise caution when opening untrusted S/MIME messages and avoid canceling message load operations while smartcard PIN or Primary Password prompt dialogs are displayed. As a compensating measure, maintain Address Space Layout Randomization to randomize Thunderbird process memory and impede gadget predictability, deploy Endpoint Detection and Response agents to detect behavioral anomalies and post-exploitation activity, and enforce Non-Executable Memory (NX/XD bit) protections to block code execution from corrupted heap and data pages. These controls limit blast radius and contain exploitation, but they do not fix the underlying use-after-free defect — apply the upstream patch to fully remediate.\n\nHighest-impact CME: CME-101 ASLR (Address Space Layout Randomization) (medium)"},{"category":"none_available","details":"Affected"}],"purl":"pkg:rpm/redhat/thunderbird?arch=src","origins":[{"source":"redhat","sourceId":"CVE-2026-113869","modified":"2026-10-20T21:31:08+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-113869.json"}]},{"source":"redhat","sourceId":"CVE-2026-113869","modified":"2026-10-20T21:31:08+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-113869.json","productId":"red_hat_enterprise_linux_9:thunderbird","product":"thunderbird as a component of Red Hat Enterprise Linux 9","status":"known_affected","remediations":[{"category":"workaround","details":"--- CME Mitigation Guidance (2026-10-20) ---\nDisclaimer: The following mitigation solutions are provided as a courtesy, pending the application of an official patch. This content was generated utilizing AI tools in conjunction with data from https://cmetaxonomy.org. Customers are advised to independently evaluate and test these temporary mitigations within their own infrastructure.\n\nThe highest-value action is to prevent premature deallocation of the S/MIME message decoder when message loading completes or is canceled while an interactive password prompt is open: upgrade to Thunderbird 158.0.1 (or the fixed Thunderbird builds), which prevents freeing the message decoder while it remains in use during active S/MIME security device password prompts, closing S/MIME encrypted message delivery triggering an interactive password prompt. Until patched, this is a concern on Thunderbird installations opening S/MIME encrypted messages across all supported platforms, so exercise caution when opening untrusted S/MIME messages and avoid canceling message load operations while smartcard PIN or Primary Password prompt dialogs are displayed. As a compensating measure, maintain Address Space Layout Randomization to randomize Thunderbird process memory and impede gadget predictability, deploy Endpoint Detection and Response agents to detect behavioral anomalies and post-exploitation activity, and enforce Non-Executable Memory (NX/XD bit) protections to block code execution from corrupted heap and data pages. These controls limit blast radius and contain exploitation, but they do not fix the underlying use-after-free defect — apply the upstream patch to fully remediate.\n\nHighest-impact CME: CME-101 ASLR (Address Space Layout Randomization) (medium)"},{"category":"none_available","details":"Affected"}],"purl":"pkg:rpm/redhat/thunderbird","origins":[{"source":"redhat","sourceId":"CVE-2026-113869","modified":"2026-10-20T21:31:08+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-113869.json"}]},{"source":"redhat","sourceId":"CVE-2026-113869","modified":"2026-10-20T21:31:08+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-113869.json","productId":"red_hat_enterprise_linux_9:thunderbird.src","product":"thunderbird.src as a component of Red Hat Enterprise Linux 9","status":"known_affected","remediations":[{"category":"workaround","details":"--- CME Mitigation Guidance (2026-10-20) ---\nDisclaimer: The following mitigation solutions are provided as a courtesy, pending the application of an official patch. This content was generated utilizing AI tools in conjunction with data from https://cmetaxonomy.org. Customers are advised to independently evaluate and test these temporary mitigations within their own infrastructure.\n\nThe highest-value action is to prevent premature deallocation of the S/MIME message decoder when message loading completes or is canceled while an interactive password prompt is open: upgrade to Thunderbird 158.0.1 (or the fixed Thunderbird builds), which prevents freeing the message decoder while it remains in use during active S/MIME security device password prompts, closing S/MIME encrypted message delivery triggering an interactive password prompt. Until patched, this is a concern on Thunderbird installations opening S/MIME encrypted messages across all supported platforms, so exercise caution when opening untrusted S/MIME messages and avoid canceling message load operations while smartcard PIN or Primary Password prompt dialogs are displayed. As a compensating measure, maintain Address Space Layout Randomization to randomize Thunderbird process memory and impede gadget predictability, deploy Endpoint Detection and Response agents to detect behavioral anomalies and post-exploitation activity, and enforce Non-Executable Memory (NX/XD bit) protections to block code execution from corrupted heap and data pages. These controls limit blast radius and contain exploitation, but they do not fix the underlying use-after-free defect — apply the upstream patch to fully remediate.\n\nHighest-impact CME: CME-101 ASLR (Address Space Layout Randomization) (medium)"},{"category":"none_available","details":"Affected"}],"purl":"pkg:rpm/redhat/thunderbird?arch=src","origins":[{"source":"redhat","sourceId":"CVE-2026-113869","modified":"2026-10-20T21:31:08+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-113869.json"}]}],"vendorCoverage":{"total":6,"shown":6,"omitted":0,"source":"redhat"}}