| CVE-2022-40957 |
Inconsistent data in instruction and data cache when creating wasm code could lead to a potentially exploitable…
|
6.5
Medium
|
Dec 22, 2022 |
| CVE-2022-40956 |
When injecting an HTML base element, some requests would ignore the CSP's base-uri settings and accept the injected…
|
6.1
Medium
|
Dec 22, 2022 |
| CVE-2022-3266 |
An out-of-bounds read can occur when decoding H264 video
|
5.5
Medium
|
Dec 22, 2022 |
| CVE-2022-38472 |
An attacker could have abused XSLT error handling to associate attacker-controlled content with another origin which was…
|
6.5
Medium
|
Dec 22, 2022 |
| CVE-2022-38478 |
Members the Mozilla Fuzzing Team reported memory safety bugs present in Firefox 103, Firefox ESR 102.1, and Firefox…
|
8.8
High
|
Dec 22, 2022 |
| CVE-2022-38477 |
Mozilla developer Nika Layzell and the Mozilla Fuzzing Team reported memory safety bugs present in Firefox 103 and…
|
8.8
High
|
Dec 22, 2022 |
| CVE-2022-38475 |
An attacker could have written a value to the first element in a zero-length JavaScript array
|
6.5
Medium
|
Dec 22, 2022 |
| CVE-2022-38474 |
A website that had permission to access the microphone could record audio without the audio notification being shown
|
4.3
Medium
|
Dec 22, 2022 |
| CVE-2022-38473 |
A cross-origin iframe referencing an XSLT document would inherit the parent domain's permissions (such as microphone…
|
8.8
High
|
Dec 22, 2022 |
| CVE-2022-36319 |
When combining CSS properties for overflow and transform, the mouse cursor could interact with different coordinates…
|
7.5
High
|
Dec 22, 2022 |
| CVE-2022-36318 |
When visiting directory listings for `chrome://` URLs as source text, some parameters were reflected
|
5.3
Medium
|
Dec 22, 2022 |
| CVE-2022-36317 |
When visiting a website with an overly long URL, the user interface would start to hang
|
6.5
Medium
|
Dec 22, 2022 |
| CVE-2022-36316 |
When using the Performance API, an attacker was able to notice subtle differences between PerformanceEntries and thus…
|
6.1
Medium
|
Dec 22, 2022 |
| CVE-2022-36315 |
When loading a script with Subresource Integrity, attackers with an injection capability could trigger the reuse of…
|
4.3
Medium
|
Dec 22, 2022 |
| CVE-2022-36314 |
When opening a Windows shortcut from the local filesystem, an attacker could supply a remote path that would lead to…
|
5.5
Medium
|
Dec 22, 2022 |
| CVE-2022-36320 |
Mozilla developers and the Mozilla Fuzzing Team reported memory safety bugs present in Firefox 102
|
9.8
Critical
|
Dec 22, 2022 |
| CVE-2022-34472 |
If there was a PAC URL set and the server that hosts the PAC was not reachable, OCSP requests would have been blocked,…
|
4.3
Medium
|
Dec 22, 2022 |
| CVE-2022-34471 |
When downloading an update for an addon, the downloaded addon update's version was not verified to match the version…
|
6.5
Medium
|
Dec 22, 2022 |
| CVE-2022-34482 |
An attacker who could have convinced a user to drag and drop an image to a filesystem could have manipulated the…
|
8.8
High
|
Dec 22, 2022 |
| CVE-2022-34470 |
Session history navigations may have led to a use-after-free and potentially exploitable crash
|
9.8
Critical
|
Dec 22, 2022 |
| CVE-2022-34481 |
In the nsTArray_Impl::ReplaceElementsAt() function, an integer overflow could have occurred when the number of…
|
8.8
High
|
Dec 22, 2022 |
| CVE-2022-34469 |
When a TLS Certificate error occurs on a domain protected by the HSTS header, the browser should not allow the user to…
|
8.8
High
|
Dec 22, 2022 |
| CVE-2022-34480 |
Within the lg_init() function, if several allocations succeed but then one fails, an uninitialized pointer would have…
|
8.8
High
|
Dec 22, 2022 |
| CVE-2022-34468 |
An iframe that was not permitted to run scripts could do so if the user clicked on a <code>javascript:</code> link
|
8.8
High
|
Dec 22, 2022 |
| CVE-2022-34479 |
A malicious website that could create a popup could have resized the popup to overlay the address bar with its own…
|
6.5
Medium
|
Dec 22, 2022 |