| CVE-2022-22749 |
When scanning QR codes, Firefox for Android would have allowed navigation to some URLs that do not point to web…
|
4.3
Moyenne
|
22 déc. 2022 |
| CVE-2022-22748 |
Malicious websites could have confused Firefox into showing the wrong origin when asking to launch a program and…
|
6.5
Moyenne
|
22 déc. 2022 |
| CVE-2022-22760 |
When importing resources using Web Workers, error messages would distinguish the difference between…
|
6.5
Moyenne
|
22 déc. 2022 |
| CVE-2022-22747 |
After accepting an untrusted certificate, handling an empty pkcs7 sequence as part of the certificate data could have…
|
6.5
Moyenne
|
22 déc. 2022 |
| CVE-2022-22759 |
If a document created a sandboxed iframe without allow-scripts, and subsequently appended an element to the iframe's…
|
9.6
Critique
|
22 déc. 2022 |
| CVE-2022-22758 |
When clicking on a tel: link, USSD codes, specified after a \* character, would be included in the phone…
|
8.8
Élevée
|
22 déc. 2022 |
| CVE-2022-22740 |
Certain network request objects were freed too early when releasing a network request handle
|
8.8
Élevée
|
22 déc. 2022 |
| CVE-2022-22746 |
A race condition could have allowed bypassing the fullscreen notification which could have lead to a fullscreen window…
|
5.9
Moyenne
|
22 déc. 2022 |
| CVE-2022-22757 |
Remote Agent, used in WebDriver, did not validate the Host or Origin headers
|
6.5
Moyenne
|
22 déc. 2022 |
| CVE-2022-22739 |
Malicious websites could have tricked users into accepting launching a program to handle an external URL protocol
|
6.5
Moyenne
|
22 déc. 2022 |
| CVE-2022-22745 |
Securitypolicyviolation events could have leaked cross-origin information for frame-ancestors violations
|
6.5
Moyenne
|
22 déc. 2022 |
| CVE-2022-22756 |
If a user was convinced to drag and drop an image to their desktop or other folder, the resulting object could have been…
|
8.8
Élevée
|
22 déc. 2022 |
| CVE-2022-22755 |
By using XSL Transforms, a malicious webserver could have served a user an XSL document that would continue to execute…
|
8.8
Élevée
|
22 déc. 2022 |
| CVE-2022-22744 |
The constructed curl command from the "Copy as curl" feature in DevTools was not properly escaped for PowerShell
|
8.8
Élevée
|
22 déc. 2022 |
| CVE-2022-22738 |
Applying a CSS filter effect could have accessed out of bounds memory
|
8.8
Élevée
|
22 déc. 2022 |
| CVE-2022-22754 |
If a user installed an extension of a particular type, the extension could have auto-updated itself and while doing…
|
6.5
Moyenne
|
22 déc. 2022 |
| CVE-2022-22764 |
Mozilla developers Paul Adenot and the Mozilla Fuzzing Team reported memory safety bugs present in Firefox 96 and…
|
8.8
Élevée
|
22 déc. 2022 |
| CVE-2022-22743 |
When navigating from inside an iframe while requesting fullscreen access, an attacker-controlled tab could have made the…
|
4.3
Moyenne
|
22 déc. 2022 |
| CVE-2022-22737 |
Constructing audio sinks could have lead to a race condition when playing audio files and closing windows
|
7.5
Élevée
|
22 déc. 2022 |
| CVE-2022-22736 |
If Firefox was installed to a world-writable directory, a local privilege escalation could occur when Firefox searched…
|
7.0
Élevée
|
22 déc. 2022 |
| CVE-2022-22763 |
When a worker is shutdown, it was possible to cause script to run late in the lifecycle, at a point after where it…
|
8.8
Élevée
|
22 déc. 2022 |
| CVE-2022-22753 |
A Time-of-Check Time-of-Use bug existed in the Maintenance (Updater) Service that could be abused to grant Users write…
|
7.1
Élevée
|
22 déc. 2022 |
| CVE-2022-22742 |
When inserting text while in edit mode, some characters might have lead to out-of-bounds memory access causing a…
|
6.5
Moyenne
|
22 déc. 2022 |
| CVE-2022-22762 |
Under certain circumstances, a JavaScript alert (or prompt) could have been shown while another website was displayed…
|
4.3
Moyenne
|
22 déc. 2022 |
| CVE-2022-22752 |
Mozilla developers Christian Holler and Jason Kratzer reported memory safety bugs present in Firefox 95
|
8.8
Élevée
|
22 déc. 2022 |