| CVE-2022-29911 |
An improper implementation of the new iframe sandbox keyword allow-top-navigation-by-user-activation could lead to…
|
6.1
Moyenne
|
22 déc. 2022 |
| CVE-2022-29909 |
Documents in deeply-nested cross-origin browsing contexts could have obtained permissions granted to the top-level…
|
8.8
Élevée
|
22 déc. 2022 |
| CVE-2022-28289 |
Mozilla developers and community members Nika Layzell, Andrew McCreight, Gabriele Svelto, and the Mozilla Fuzzing Team…
|
8.8
Élevée
|
22 déc. 2022 |
| CVE-2022-28286 |
Due to a layout change, iframe contents could have been rendered outside of its border
|
5.4
Moyenne
|
22 déc. 2022 |
| CVE-2022-28285 |
When generating the assembly code for <code>MLoadTypedArrayElementHole</code>, an incorrect AliasSet was used
|
6.5
Moyenne
|
22 déc. 2022 |
| CVE-2022-28282 |
By using a link with rel="localization" a use-after-free could have been triggered by destroying an object during…
|
6.5
Moyenne
|
22 déc. 2022 |
| CVE-2022-28281 |
If a compromised content process sent an unexpected number of WebAuthN Extensions in a Register command to the parent…
|
8.8
Élevée
|
22 déc. 2022 |
| CVE-2022-26486 |
Exploitée
Mozilla Firefox Use-After-Free Vulnerability
|
9.6
Critique
|
22 déc. 2022 |
| CVE-2022-26485 |
Exploitée
Mozilla Firefox Use-After-Free Vulnerability
|
8.8
Élevée
|
22 déc. 2022 |
| CVE-2022-26387 |
When installing an add-on, Firefox verified the signature before prompting the user; but while the user was confirming…
|
7.5
Élevée
|
22 déc. 2022 |
| CVE-2022-26386 |
Previously Firefox for macOS and Linux would download temporary files to a user-specific directory in /tmp, but this…
|
6.5
Moyenne
|
22 déc. 2022 |
| CVE-2022-26384 |
If an attacker could control the contents of an iframe sandboxed with allow-popups but not allow-scripts, they were able…
|
9.6
Critique
|
22 déc. 2022 |
| CVE-2022-26383 |
When resizing a popup after requesting fullscreen access, the popup would not display the fullscreen notification
|
4.3
Moyenne
|
22 déc. 2022 |
| CVE-2022-26381 |
An attacker could have caused a use-after-free by forcing a text reflow in an SVG object leading to a potentially…
|
8.8
Élevée
|
22 déc. 2022 |
| CVE-2022-22748 |
Malicious websites could have confused Firefox into showing the wrong origin when asking to launch a program and…
|
6.5
Moyenne
|
22 déc. 2022 |
| CVE-2022-22760 |
When importing resources using Web Workers, error messages would distinguish the difference between…
|
6.5
Moyenne
|
22 déc. 2022 |
| CVE-2022-22747 |
After accepting an untrusted certificate, handling an empty pkcs7 sequence as part of the certificate data could have…
|
6.5
Moyenne
|
22 déc. 2022 |
| CVE-2022-22759 |
If a document created a sandboxed iframe without allow-scripts, and subsequently appended an element to the iframe's…
|
9.6
Critique
|
22 déc. 2022 |
| CVE-2022-22740 |
Certain network request objects were freed too early when releasing a network request handle
|
8.8
Élevée
|
22 déc. 2022 |
| CVE-2022-22746 |
A race condition could have allowed bypassing the fullscreen notification which could have lead to a fullscreen window…
|
5.9
Moyenne
|
22 déc. 2022 |
| CVE-2022-22739 |
Malicious websites could have tricked users into accepting launching a program to handle an external URL protocol
|
6.5
Moyenne
|
22 déc. 2022 |
| CVE-2022-22745 |
Securitypolicyviolation events could have leaked cross-origin information for frame-ancestors violations
|
6.5
Moyenne
|
22 déc. 2022 |
| CVE-2022-22756 |
If a user was convinced to drag and drop an image to their desktop or other folder, the resulting object could have been…
|
8.8
Élevée
|
22 déc. 2022 |
| CVE-2022-22744 |
The constructed curl command from the "Copy as curl" feature in DevTools was not properly escaped for PowerShell
|
8.8
Élevée
|
22 déc. 2022 |
| CVE-2022-22738 |
Applying a CSS filter effect could have accessed out of bounds memory
|
8.8
Élevée
|
22 déc. 2022 |