| CVE-2022-26486 |
Exploitée
Mozilla Firefox Use-After-Free Vulnerability
|
9.6
Critique
|
22 déc. 2022 |
| CVE-2022-26485 |
Exploitée
Mozilla Firefox Use-After-Free Vulnerability
|
8.8
Élevée
|
22 déc. 2022 |
| CVE-2022-26387 |
When installing an add-on, Firefox verified the signature before prompting the user; but while the user was confirming…
|
7.5
Élevée
|
22 déc. 2022 |
| CVE-2022-26386 |
Previously Firefox for macOS and Linux would download temporary files to a user-specific directory in /tmp, but this…
|
6.5
Moyenne
|
22 déc. 2022 |
| CVE-2022-26384 |
If an attacker could control the contents of an iframe sandboxed with allow-popups but not allow-scripts, they were able…
|
9.6
Critique
|
22 déc. 2022 |
| CVE-2022-26383 |
When resizing a popup after requesting fullscreen access, the popup would not display the fullscreen notification
|
4.3
Moyenne
|
22 déc. 2022 |
| CVE-2022-26381 |
An attacker could have caused a use-after-free by forcing a text reflow in an SVG object leading to a potentially…
|
8.8
Élevée
|
22 déc. 2022 |
| CVE-2022-22748 |
Malicious websites could have confused Firefox into showing the wrong origin when asking to launch a program and…
|
6.5
Moyenne
|
22 déc. 2022 |
| CVE-2022-22760 |
When importing resources using Web Workers, error messages would distinguish the difference between…
|
6.5
Moyenne
|
22 déc. 2022 |
| CVE-2022-22747 |
After accepting an untrusted certificate, handling an empty pkcs7 sequence as part of the certificate data could have…
|
6.5
Moyenne
|
22 déc. 2022 |
| CVE-2022-22759 |
If a document created a sandboxed iframe without allow-scripts, and subsequently appended an element to the iframe's…
|
9.6
Critique
|
22 déc. 2022 |
| CVE-2022-22740 |
Certain network request objects were freed too early when releasing a network request handle
|
8.8
Élevée
|
22 déc. 2022 |
| CVE-2022-22746 |
A race condition could have allowed bypassing the fullscreen notification which could have lead to a fullscreen window…
|
5.9
Moyenne
|
22 déc. 2022 |
| CVE-2022-22739 |
Malicious websites could have tricked users into accepting launching a program to handle an external URL protocol
|
6.5
Moyenne
|
22 déc. 2022 |
| CVE-2022-22745 |
Securitypolicyviolation events could have leaked cross-origin information for frame-ancestors violations
|
6.5
Moyenne
|
22 déc. 2022 |
| CVE-2022-22756 |
If a user was convinced to drag and drop an image to their desktop or other folder, the resulting object could have been…
|
8.8
Élevée
|
22 déc. 2022 |
| CVE-2022-22744 |
The constructed curl command from the "Copy as curl" feature in DevTools was not properly escaped for PowerShell
|
8.8
Élevée
|
22 déc. 2022 |
| CVE-2022-22738 |
Applying a CSS filter effect could have accessed out of bounds memory
|
8.8
Élevée
|
22 déc. 2022 |
| CVE-2022-22754 |
If a user installed an extension of a particular type, the extension could have auto-updated itself and while doing…
|
6.5
Moyenne
|
22 déc. 2022 |
| CVE-2022-22764 |
Mozilla developers Paul Adenot and the Mozilla Fuzzing Team reported memory safety bugs present in Firefox 96 and…
|
8.8
Élevée
|
22 déc. 2022 |
| CVE-2022-22743 |
When navigating from inside an iframe while requesting fullscreen access, an attacker-controlled tab could have made the…
|
4.3
Moyenne
|
22 déc. 2022 |
| CVE-2022-22737 |
Constructing audio sinks could have lead to a race condition when playing audio files and closing windows
|
7.5
Élevée
|
22 déc. 2022 |
| CVE-2022-22763 |
When a worker is shutdown, it was possible to cause script to run late in the lifecycle, at a point after where it…
|
8.8
Élevée
|
22 déc. 2022 |
| CVE-2022-22753 |
A Time-of-Check Time-of-Use bug existed in the Maintenance (Updater) Service that could be abused to grant Users write…
|
7.1
Élevée
|
22 déc. 2022 |
| CVE-2022-22742 |
When inserting text while in edit mode, some characters might have lead to out-of-bounds memory access causing a…
|
6.5
Moyenne
|
22 déc. 2022 |