Red Hat Security Advisory

RHSA-2022:5767

firefox security update

Released 2022-08-01 · Red Hat rating Important · View on Red Hat →

Fixed in

TI-2022-02315 CVE-2022-2505 · GHSA-mg2x-8rwm-j9cx

MEDIUM 41

Mozilla developers and the Mozilla Fuzzing Team reported memory safety bugs present in Firefox 102.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00798 Published 2022-12-22 Partial fix · 102.1, 103 CWE-787

TI-2022-16666 CVE-2022-36319 · GHSA-4jxg-7cv4-3gcc

MEDIUM 40

When combining CSS properties for overflow and transform, the mouse cursor could interact with different coordinates than displayed.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.0074 Published 2022-12-22 Partial fix · 102.1, 91.12 +1 CWE-1021

TI-2022-16665 CVE-2022-36318 · GHSA-3q68-3vrx-8h5f

LOW 25

When visiting directory listings for `chrome://` URLs as source text, some parameters were reflected.

CVSS 3.1MEDIUM 5.3 Network No auth User interaction EPSS 0.0053 Published 2022-12-22 Partial fix · 102.1, 91.12 +1 CWE-362