| CVE-2022-34478 |
The ms-msdt, search, and search-ms protocols deliver content to Microsoft applications, bypassing the browser, when a…
|
6.5
Medium
|
Dec 22, 2022 |
| CVE-2022-34485 |
Mozilla developers Bryce Seager van Dyk and the Mozilla Fuzzing Team reported potential vulnerabilities present in…
|
9.8
Critical
|
Dec 22, 2022 |
| CVE-2022-34477 |
The MediaError message property should be consistent to avoid leaking information about cross-origin resources;…
|
7.5
High
|
Dec 22, 2022 |
| CVE-2022-34476 |
ASN.1 parsing of an indefinite SEQUENCE inside an indefinite GROUP could have resulted in the parser accepting malformed…
|
9.8
Critical
|
Dec 22, 2022 |
| CVE-2022-34484 |
The Mozilla Fuzzing Team reported potential vulnerabilities present in Thunderbird 91.10
|
8.8
High
|
Dec 22, 2022 |
| CVE-2022-34475 |
SVG <use> tags that referenced a same-origin document could have resulted in script execution if attacker input…
|
6.1
Medium
|
Dec 22, 2022 |
| CVE-2022-34483 |
An attacker who could have convinced a user to drag and drop an image to a filesystem could have manipulated the…
|
8.8
High
|
Dec 22, 2022 |
| CVE-2022-34474 |
Even when an iframe was sandboxed with allow-top-navigation-by-user-activation, if it received a redirect header to an…
|
6.1
Medium
|
Dec 22, 2022 |
| CVE-2022-34473 |
The HTML Sanitizer should have sanitized the href attribute of SVG <use> tags; however it incorrectly did not…
|
6.1
Medium
|
Dec 22, 2022 |
| CVE-2022-31739 |
When downloading files on Windows, the % character was not escaped, which could have lead to a download incorrectly…
|
8.8
High
|
Dec 22, 2022 |
| CVE-2022-31748 |
Mozilla developers Gabriele Svelto, Timothy Nikkel, Randell Jesup, Jon Coppeard, and the Mozilla Fuzzing Team reported…
|
9.8
Critical
|
Dec 22, 2022 |
| CVE-2022-31738 |
When exiting fullscreen mode, an iframe could have confused the browser about the current state of fullscreen, resulting…
|
6.5
Medium
|
Dec 22, 2022 |
| CVE-2022-31747 |
Mozilla developers Andrew McCreight, Nicolas B
|
9.8
Critical
|
Dec 22, 2022 |
| CVE-2022-31745 |
If array shift operations are not used, the Garbage Collector may have become confused about valid objects
|
4.3
Medium
|
Dec 22, 2022 |
| CVE-2022-31737 |
A malicious webpage could have caused an out-of-bounds write in WebGL, leading to memory corruption and a potentially…
|
9.8
Critical
|
Dec 22, 2022 |
| CVE-2022-31744 |
An attacker could have injected CSS into stylesheets accessible via internal URIs, such as resource:, and in doing so…
|
6.5
Medium
|
Dec 22, 2022 |
| CVE-2022-31736 |
A malicious website could have learned the size of a cross-origin resource that supported Range requests
|
9.8
Critical
|
Dec 22, 2022 |
| CVE-2022-31743 |
Firefox's HTML parser did not correctly interpret HTML comment tags, resulting in an incongruity with other browsers
|
6.5
Medium
|
Dec 22, 2022 |
| CVE-2022-31742 |
An attacker could have exploited a timing attack by sending a large number of allowCredential entries and detecting…
|
6.5
Medium
|
Dec 22, 2022 |
| CVE-2022-31741 |
A crafted CMS message could have been processed incorrectly, leading to an invalid memory read, and potentially…
|
8.8
High
|
Dec 22, 2022 |
| CVE-2022-31740 |
On arm64, WASM code could have resulted in incorrect assembly generation leading to a register allocation problem, and a…
|
8.8
High
|
Dec 22, 2022 |
| CVE-2022-2505 |
Mozilla developers and the Mozilla Fuzzing Team reported memory safety bugs present in Firefox 102
|
8.8
High
|
Dec 22, 2022 |
| CVE-2022-2200 |
If an object prototype was corrupted by an attacker, they would have been able to set undesired attributes on a…
|
8.8
High
|
Dec 22, 2022 |
| CVE-2022-29918 |
Mozilla developers Gabriele Svelto, Randell Jesup and the Mozilla Fuzzing Team reported memory safety bugs present in…
|
8.8
High
|
Dec 22, 2022 |
| CVE-2022-29917 |
Mozilla developers Andrew McCreight, Gabriele Svelto, Tom Ritter and the Mozilla Fuzzing Team reported memory safety…
|
9.8
Critical
|
Dec 22, 2022 |