| CVE-2022-29916 |
Firefox behaved slightly differently for already known resources when loading CSS resources involving CSS variables
|
6.5
Medium
|
Dec 22, 2022 |
| CVE-2022-29915 |
The Performance API did not properly hide the fact whether a request cross-origin resource has observed redirects
|
4.3
Medium
|
Dec 22, 2022 |
| CVE-2022-29914 |
When reusing existing popups Firefox would have allowed them to cover the fullscreen notification UI, which could have…
|
6.5
Medium
|
Dec 22, 2022 |
| CVE-2022-29912 |
Requests initiated through reader mode did not properly omit cookies with a SameSite attribute
|
6.1
Medium
|
Dec 22, 2022 |
| CVE-2022-29911 |
An improper implementation of the new iframe sandbox keyword allow-top-navigation-by-user-activation could lead to…
|
6.1
Medium
|
Dec 22, 2022 |
| CVE-2022-29910 |
When closed or sent to the background, Firefox for Android would not properly record and persist HSTS settings.*Note:…
|
6.1
Medium
|
Dec 22, 2022 |
| CVE-2022-29909 |
Documents in deeply-nested cross-origin browsing contexts could have obtained permissions granted to the top-level…
|
8.8
High
|
Dec 22, 2022 |
| CVE-2022-28289 |
Mozilla developers and community members Nika Layzell, Andrew McCreight, Gabriele Svelto, and the Mozilla Fuzzing Team…
|
8.8
High
|
Dec 22, 2022 |
| CVE-2022-28288 |
Mozilla developers and community members Randell Jesup, Sebastian Hengst, and the Mozilla Fuzzing Team reported memory…
|
8.8
High
|
Dec 22, 2022 |
| CVE-2022-28287 |
In unusual circumstances, selecting text could cause text selection caching to behave incorrectly, leading to a crash
|
6.5
Medium
|
Dec 22, 2022 |
| CVE-2022-28286 |
Due to a layout change, iframe contents could have been rendered outside of its border
|
5.4
Medium
|
Dec 22, 2022 |
| CVE-2022-28285 |
When generating the assembly code for <code>MLoadTypedArrayElementHole</code>, an incorrect AliasSet was used
|
6.5
Medium
|
Dec 22, 2022 |
| CVE-2022-28284 |
SVG's <use> element could have been used to load unexpected content that could have executed script in certain…
|
8.8
High
|
Dec 22, 2022 |
| CVE-2022-28283 |
The sourceMapURL feature in devtools was missing security checks that would have allowed a webpage to attempt to include…
|
6.5
Medium
|
Dec 22, 2022 |
| CVE-2022-28282 |
By using a link with rel="localization" a use-after-free could have been triggered by destroying an object during…
|
6.5
Medium
|
Dec 22, 2022 |
| CVE-2022-28281 |
If a compromised content process sent an unexpected number of WebAuthN Extensions in a Register command to the parent…
|
8.8
High
|
Dec 22, 2022 |
| CVE-2022-26486 |
Exploited
Mozilla Firefox Use-After-Free Vulnerability
|
9.6
Critical
|
Dec 22, 2022 |
| CVE-2022-26485 |
Exploited
Mozilla Firefox Use-After-Free Vulnerability
|
8.8
High
|
Dec 22, 2022 |
| CVE-2022-26387 |
When installing an add-on, Firefox verified the signature before prompting the user; but while the user was confirming…
|
7.5
High
|
Dec 22, 2022 |
| CVE-2022-26385 |
In unusual circumstances, an individual thread may outlive the thread's manager during shutdown
|
6.5
Medium
|
Dec 22, 2022 |
| CVE-2022-26384 |
If an attacker could control the contents of an iframe sandboxed with allow-popups but not allow-scripts, they were able…
|
9.6
Critical
|
Dec 22, 2022 |
| CVE-2022-26383 |
When resizing a popup after requesting fullscreen access, the popup would not display the fullscreen notification
|
4.3
Medium
|
Dec 22, 2022 |
| CVE-2022-26382 |
While the text displayed in Autofill tooltips cannot be directly read by JavaScript, the text was rendered using page…
|
4.3
Medium
|
Dec 22, 2022 |
| CVE-2022-26381 |
An attacker could have caused a use-after-free by forcing a text reflow in an SVG object leading to a potentially…
|
8.8
High
|
Dec 22, 2022 |
| CVE-2022-22750 |
By generally accepting and passing resource handles across processes, a compromised content process might have…
|
6.5
Medium
|
Dec 22, 2022 |