| CVE-2022-40962 |
Mozilla developers Nika Layzell, Timothy Nikkel, Sebastian Hengst, Andreas Pehrson, and the Mozilla Fuzzing Team…
|
8.8
High
|
Dec 22, 2022 |
| CVE-2022-40960 |
Concurrent use of the URL parser with non-UTF-8 data was not thread-safe
|
6.5
Medium
|
Dec 22, 2022 |
| CVE-2022-40959 |
During iframe navigation, certain pages did not have their FeaturePolicy fully initialized leading to a bypass that…
|
6.5
Medium
|
Dec 22, 2022 |
| CVE-2022-40958 |
By injecting a cookie with certain special characters, an attacker on a shared subdomain which is not a secure context…
|
6.5
Medium
|
Dec 22, 2022 |
| CVE-2022-40957 |
Inconsistent data in instruction and data cache when creating wasm code could lead to a potentially exploitable…
|
6.5
Medium
|
Dec 22, 2022 |
| CVE-2022-40956 |
When injecting an HTML base element, some requests would ignore the CSP's base-uri settings and accept the injected…
|
6.1
Medium
|
Dec 22, 2022 |
| CVE-2022-3266 |
An out-of-bounds read can occur when decoding H264 video
|
5.5
Medium
|
Dec 22, 2022 |
| CVE-2022-3155 |
When saving or opening an email attachment on macOS, Thunderbird did not set attribute com.apple.quarantine on the…
|
7.8
High
|
Dec 22, 2022 |
| CVE-2022-3034 |
When receiving an HTML email that specified to load an iframe element from a remote location, a request to the remote…
|
4.3
Medium
|
Dec 22, 2022 |
| CVE-2022-3033 |
If a Thunderbird user replied to a crafted HTML email containing a meta tag, with the meta tag having the…
|
8.1
High
|
Dec 22, 2022 |
| CVE-2022-3032 |
When receiving an HTML email that contained an iframe element, which used a srcdoc attribute to define the inner HTML…
|
Not rated
|
Dec 22, 2022 |
| CVE-2022-38472 |
An attacker could have abused XSLT error handling to associate attacker-controlled content with another origin which was…
|
6.5
Medium
|
Dec 22, 2022 |
| CVE-2022-38478 |
Members the Mozilla Fuzzing Team reported memory safety bugs present in Firefox 103, Firefox ESR 102.1, and Firefox…
|
8.8
High
|
Dec 22, 2022 |
| CVE-2022-38477 |
Mozilla developer Nika Layzell and the Mozilla Fuzzing Team reported memory safety bugs present in Firefox 103 and…
|
8.8
High
|
Dec 22, 2022 |
| CVE-2022-38476 |
A data race could occur in the PK11_ChangePW function, potentially leading to a use-after-free…
|
7.5
High
|
Dec 22, 2022 |
| CVE-2022-38473 |
A cross-origin iframe referencing an XSLT document would inherit the parent domain's permissions (such as microphone…
|
8.8
High
|
Dec 22, 2022 |
| CVE-2022-36319 |
When combining CSS properties for overflow and transform, the mouse cursor could interact with different coordinates…
|
7.5
High
|
Dec 22, 2022 |
| CVE-2022-36318 |
When visiting directory listings for `chrome://` URLs as source text, some parameters were reflected
|
5.3
Medium
|
Dec 22, 2022 |
| CVE-2022-36314 |
When opening a Windows shortcut from the local filesystem, an attacker could supply a remote path that would lead to…
|
5.5
Medium
|
Dec 22, 2022 |
| CVE-2022-34472 |
If there was a PAC URL set and the server that hosts the PAC was not reachable, OCSP requests would have been blocked,…
|
4.3
Medium
|
Dec 22, 2022 |
| CVE-2022-34470 |
Session history navigations may have led to a use-after-free and potentially exploitable crash
|
9.8
Critical
|
Dec 22, 2022 |
| CVE-2022-34481 |
In the nsTArray_Impl::ReplaceElementsAt() function, an integer overflow could have occurred when the number of…
|
8.8
High
|
Dec 22, 2022 |
| CVE-2022-34468 |
An iframe that was not permitted to run scripts could do so if the user clicked on a <code>javascript:</code> link
|
8.8
High
|
Dec 22, 2022 |
| CVE-2022-34479 |
A malicious website that could create a popup could have resized the popup to overlay the address bar with its own…
|
6.5
Medium
|
Dec 22, 2022 |
| CVE-2022-34478 |
The ms-msdt, search, and search-ms protocols deliver content to Microsoft applications, bypassing the browser, when a…
|
6.5
Medium
|
Dec 22, 2022 |