| CVE-2022-34484 |
The Mozilla Fuzzing Team reported potential vulnerabilities present in Thunderbird 91.10
|
8.8
High
|
Dec 22, 2022 |
| CVE-2022-31739 |
When downloading files on Windows, the % character was not escaped, which could have lead to a download incorrectly…
|
8.8
High
|
Dec 22, 2022 |
| CVE-2022-31738 |
When exiting fullscreen mode, an iframe could have confused the browser about the current state of fullscreen, resulting…
|
6.5
Medium
|
Dec 22, 2022 |
| CVE-2022-31747 |
Mozilla developers Andrew McCreight, Nicolas B
|
9.8
Critical
|
Dec 22, 2022 |
| CVE-2022-31737 |
A malicious webpage could have caused an out-of-bounds write in WebGL, leading to memory corruption and a potentially…
|
9.8
Critical
|
Dec 22, 2022 |
| CVE-2022-31744 |
An attacker could have injected CSS into stylesheets accessible via internal URIs, such as resource:, and in doing so…
|
6.5
Medium
|
Dec 22, 2022 |
| CVE-2022-31736 |
A malicious website could have learned the size of a cross-origin resource that supported Range requests
|
9.8
Critical
|
Dec 22, 2022 |
| CVE-2022-31742 |
An attacker could have exploited a timing attack by sending a large number of allowCredential entries and detecting…
|
6.5
Medium
|
Dec 22, 2022 |
| CVE-2022-31741 |
A crafted CMS message could have been processed incorrectly, leading to an invalid memory read, and potentially…
|
8.8
High
|
Dec 22, 2022 |
| CVE-2022-31740 |
On arm64, WASM code could have resulted in incorrect assembly generation leading to a register allocation problem, and a…
|
8.8
High
|
Dec 22, 2022 |
| CVE-2022-2505 |
Mozilla developers and the Mozilla Fuzzing Team reported memory safety bugs present in Firefox 102
|
8.8
High
|
Dec 22, 2022 |
| CVE-2022-2226 |
An OpenPGP digital signature includes information about the date when the signature was created
|
6.5
Medium
|
Dec 22, 2022 |
| CVE-2022-2200 |
If an object prototype was corrupted by an attacker, they would have been able to set undesired attributes on a…
|
8.8
High
|
Dec 22, 2022 |
| CVE-2022-29917 |
Mozilla developers Andrew McCreight, Gabriele Svelto, Tom Ritter and the Mozilla Fuzzing Team reported memory safety…
|
9.8
Critical
|
Dec 22, 2022 |
| CVE-2022-29916 |
Firefox behaved slightly differently for already known resources when loading CSS resources involving CSS variables
|
6.5
Medium
|
Dec 22, 2022 |
| CVE-2022-29914 |
When reusing existing popups Firefox would have allowed them to cover the fullscreen notification UI, which could have…
|
6.5
Medium
|
Dec 22, 2022 |
| CVE-2022-29913 |
The parent process would not properly check whether the Speech Synthesis feature is enabled, when receiving instructions…
|
6.5
Medium
|
Dec 22, 2022 |
| CVE-2022-29912 |
Requests initiated through reader mode did not properly omit cookies with a SameSite attribute
|
6.1
Medium
|
Dec 22, 2022 |
| CVE-2022-29911 |
An improper implementation of the new iframe sandbox keyword allow-top-navigation-by-user-activation could lead to…
|
6.1
Medium
|
Dec 22, 2022 |
| CVE-2022-29909 |
Documents in deeply-nested cross-origin browsing contexts could have obtained permissions granted to the top-level…
|
8.8
High
|
Dec 22, 2022 |
| CVE-2022-28289 |
Mozilla developers and community members Nika Layzell, Andrew McCreight, Gabriele Svelto, and the Mozilla Fuzzing Team…
|
8.8
High
|
Dec 22, 2022 |
| CVE-2022-28286 |
Due to a layout change, iframe contents could have been rendered outside of its border
|
5.4
Medium
|
Dec 22, 2022 |
| CVE-2022-28285 |
When generating the assembly code for <code>MLoadTypedArrayElementHole</code>, an incorrect AliasSet was used
|
6.5
Medium
|
Dec 22, 2022 |
| CVE-2022-28282 |
By using a link with rel="localization" a use-after-free could have been triggered by destroying an object during…
|
6.5
Medium
|
Dec 22, 2022 |
| CVE-2022-28281 |
If a compromised content process sent an unexpected number of WebAuthN Extensions in a Register command to the parent…
|
8.8
High
|
Dec 22, 2022 |