TI-2022-18100 CVE-2022-38478 · GHSA-c5f3-h7xh-cf2f
Out-of-bounds write in Mozilla Thunderbird
Priority MEDIUM 42
Members the Mozilla Fuzzing Team reported memory safety bugs present in Firefox 103, Firefox ESR 102.1, and Firefox ESR 91.12.
RHSA-2022:6179
firefox security update
Released 2022-08-24 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Client (v. 7) firefox-91.13.0-1.el7_9
- Red Hat Enterprise Linux Client Optional (v. 7) firefox-91.13.0-1.el7_9
- Red Hat Enterprise Linux Server (v. 7) firefox-91.13.0-1.el7_9
- Red Hat Enterprise Linux Server Optional (v. 7) firefox-91.13.0-1.el7_9
- Red Hat Enterprise Linux Workstation (v. 7) firefox-91.13.0-1.el7_9
- Red Hat Enterprise Linux Workstation Optional (v. 7) firefox-91.13.0-1.el7_9
Fixes 5 records
TI-2022-18099 CVE-2022-38477 · GHSA-79cc-3p55-rr77
Out-of-bounds write in Mozilla Firefox ESR
Priority MEDIUM 42
Mozilla developer Nika Layzell and the Mozilla Fuzzing Team reported memory safety bugs present in Firefox 103 and Firefox ESR 102.1.
TI-2022-18095 CVE-2022-38473 · GHSA-j9c4-m6g4-vjv3
A cross-origin iframe referencing an XSLT document would inherit the parent domain's…
Priority MEDIUM 41
A cross-origin iframe referencing an XSLT document would inherit the parent domain's permissions (such as microphone or camera access).
TI-2022-18098 CVE-2022-38476 · GHSA-mj64-2668-m2rv
Use after free in Mozilla Firefox ESR
Priority LOW 36
A data race could occur in the <code>PK11_ChangePW</code> function, potentially leading to a use-after-free vulnerability.
TI-2022-18094 CVE-2022-38472 · GHSA-rr53-g8m7-wrvf
Origin validation error in Mozilla Thunderbird
Priority LOW 29
An attacker could have abused XSLT error handling to associate attacker-controlled content with another origin which was displayed in the address bar.