Browse CVEs

HIGH 8.8 CVE-2022-28289 Mozilla developers and community members Nika Layzell, Andrew McCreight, Gabriele Svelto, and the Mozilla Fuzzing Team reported memory safety bugs pr… Firefox 91.8 / 99.0+ Fix from $1,9502022-12-22 HIGH 8.8 CVE-2022-29909 Documents in deeply-nested cross-origin browsing contexts could have obtained permissions granted to the top-level origin, bypassing the existing pro… Firefox 91.9 / 100.0+ Fix from $1,9502022-12-22 MEDIUM 6.1 CVE-2022-29910 When closed or sent to the background, Firefox for Android would not properly record and persist HSTS settings.<br>*Note: This issue only affected Fi… Firefox 100.0+ Fix from $1,6002022-12-22 MEDIUM 6.1 CVE-2022-29911 An improper implementation of the new iframe sandbox keyword <code>allow-top-navigation-by-user-activation</code> could lead to script execution with… Firefox 91.9 / 100.0+ Fix from $1,6002022-12-22 HIGH 8.8 CVE-2022-28284 SVG's <code>&lt;use&gt;</code> element could have been used to load unexpected content that could have executed script in certain circumstances. Whil… Firefox 99.0+ Fix from $1,9502022-12-22 HIGH 8.8 CVE-2022-28288 Mozilla developers and community members Randell Jesup, Sebastian Hengst, and the Mozilla Fuzzing Team reported memory safety bugs present in Firefox… Firefox 99.0+ Fix from $1,9502022-12-22 MEDIUM 6.5 CVE-2022-28285 When generating the assembly code for <code>MLoadTypedArrayElementHole</code>, an incorrect AliasSet was used. In conjunction with another vulnerabil… Firefox 91.8 / 99.0+ Fix from $1,6002022-12-22 MEDIUM 6.5 CVE-2022-28287 In unusual circumstances, selecting text could cause text selection caching to behave incorrectly, leading to a crash. This vulnerability affects Fir… Firefox 99.0+ Fix from $1,6002022-12-22 MEDIUM 5.4 CVE-2022-28286 Due to a layout change, iframe contents could have been rendered outside of its border. This could have led to user confusion or spoofing attacks. Th… Firefox 91.8 / 99.0+ Fix from $1,6002022-12-22 HIGH 8.8 CVE-2022-28281 If a compromised content process sent an unexpected number of WebAuthN Extensions in a Register command to the parent process, an out of bounds write… Firefox 91.8 / 99.0+ Fix from $1,9502022-12-22 MEDIUM 6.5 CVE-2022-28282 By using a link with <code>rel="localization"</code> a use-after-free could have been triggered by destroying an object during JavaScript execution a… Firefox 91.8 / 99.0+ Fix from $1,6002022-12-22 MEDIUM 6.5 CVE-2022-28283 The sourceMapURL feature in devtools was missing security checks that would have allowed a webpage to attempt to include local files or other files t… Firefox 99.0+ Fix from $1,6002022-12-22 CRITICAL 9.6 CVE-2022-26486 KEV An unexpected message in the WebGPU IPC framework could lead to a use-after-free and exploitable sandbox escape. We have had reports of attacks in th… Firefox 91.6.1 / 91.6.2+ Fix from $2,3002022-12-22 HIGH 8.8 CVE-2022-26485 KEVEPSS 14% Removing an XSLT parameter during processing could have lead to an exploitable use-after-free. We have had reports of attacks in the wild abusing thi… Firefox 91.6.1 / 91.6.2+ Fix from $1,9502022-12-22 HIGH 7.5 CVE-2022-26387 When installing an add-on, Firefox verified the signature before prompting the user; but while the user was confirming the prompt, the underlying add… Firefox 91.7 / 98.0+ Fix from $1,9502022-12-22 MEDIUM 6.5 CVE-2022-26386 Previously Firefox for macOS and Linux would download temporary files to a user-specific directory in <code>/tmp</code>, but this behavior was change… Firefox Esr 91.7+ Fix from $1,6002022-12-22 CRITICAL 9.6 CVE-2022-26384 If an attacker could control the contents of an iframe sandboxed with <code>allow-popups</code> but not <code>allow-scripts</code>, they were able to… Firefox 91.7 / 98.0+ Fix from $2,3002022-12-22 MEDIUM 6.5 CVE-2022-26385 In unusual circumstances, an individual thread may outlive the thread's manager during shutdown. This could have led to a use-after-free causing a po… Firefox 98.0+ Fix from $1,6002022-12-22 HIGH 8.8 CVE-2022-22761 Web-accessible extension pages (pages with a moz-extension:// scheme) were not correctly enforcing the frame-ancestors directive when it was used in … Firefox 91.6 / 97.0+ Fix from $1,9502022-12-22 HIGH 8.8 CVE-2022-22763 When a worker is shutdown, it was possible to cause script to run late in the lifecycle, at a point after where it should not be possible. This vulne… Firefox 91.6 / 96.0+ Fix from $1,9502022-12-22 HIGH 8.8 CVE-2022-22764 Mozilla developers Paul Adenot and the Mozilla Fuzzing Team reported memory safety bugs present in Firefox 96 and Firefox ESR 91.5. Some of these bug… Firefox 91.6 / 97.0+ Fix from $1,9502022-12-22 HIGH 8.8 CVE-2022-26381 An attacker could have caused a use-after-free by forcing a text reflow in an SVG object leading to a potentially exploitable crash. This vulnerabili… Firefox 91.7 / 98.0+ Fix from $1,9502022-12-22 CRITICAL 9.6 CVE-2022-22759 If a document created a sandboxed iframe without <code>allow-scripts</code>, and subsequently appended an element to the iframe's document that e.g. … Firefox 91.6 / 97.0+ Fix from $2,3002022-12-22 HIGH 8.8 CVE-2022-22758 When clicking on a tel: link, USSD codes, specified after a <code>\*</code> character, would be included in the phone number. On certain phones, or o… Firefox 97.0+ Fix from $1,9502022-12-22 MEDIUM 6.5 CVE-2022-22760 When importing resources using Web Workers, error messages would distinguish the difference between <code>application/javascript</code> responses and… Firefox 91.6 / 97.0+ Fix from $1,6002022-12-22 HIGH 8.8 CVE-2022-22755 By using XSL Transforms, a malicious webserver could have served a user an XSL document that would continue to execute JavaScript (within the bounds … Firefox 97.0+ Fix from $1,9502022-12-22 HIGH 8.8 CVE-2022-22756 If a user was convinced to drag and drop an image to their desktop or other folder, the resulting object could have been changed into an executable s… Firefox 91.6 / 97.0+ Fix from $1,9502022-12-22 MEDIUM 6.5 CVE-2022-22757 Remote Agent, used in WebDriver, did not validate the Host or Origin headers. This could have allowed websites to connect back locally to the user's … Firefox 97.0+ Fix from $1,6002022-12-22 HIGH 8.8 CVE-2022-22751 Mozilla developers Calixte Denizet, Kershaw Chang, Christian Holler, Jason Kratzer, Gabriele Svelto, Tyson Smith, Simon Giesecke, and Steve Fink repo… Firefox 91.5 / 96.0+ Fix from $1,9502022-12-22 HIGH 8.8 CVE-2022-22752 Mozilla developers Christian Holler and Jason Kratzer reported memory safety bugs present in Firefox 95. Some of these bugs showed evidence of memory… Firefox 96.0+ Fix from $1,9502022-12-22