Read the docs
Red Hat Security Advisory

RHSA-2022:7070

firefox security update

Released 2022-10-20 · Red Hat rating Important · View on Red Hat →

Fixed in

Fixes 4 records

TI-2022-20913 CVE-2022-42927 · GHSA-9jhw-8cjq-cxc8

Origin validation error in Mozilla Firefox

Priority HIGH 70

A same-origin policy violation could have allowed the theft of cross-origin URL entries, leaking the result of a redirect, via `performance.getEntries()`.

CVSS 3.1HIGH 8.1 Network No auth User interaction EPSS 0.00445 Published 2022-12-22 Partial fix · 106, 102.4 CWE-346
TI-2022-20914 CVE-2022-42928 · GHSA-4jg9-9xg2-cc8h

NULL pointer dereference in Mozilla Firefox

Priority MEDIUM 42

Certain types of allocations were missing annotations that, if the Garbage Collector was in a specific state, could have lead to memory corruption and a potentially exploitable crash.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00892 Published 2022-12-22 Partial fix · 106, 102.4 CWE-476
TI-2022-20918 CVE-2022-42932 · GHSA-mw2h-r48f-g8c9

Out-of-bounds write in Mozilla Firefox

Priority MEDIUM 41

Mozilla developers Ashley Hale and the Mozilla Fuzzing Team reported memory safety bugs present in Firefox 105 and Firefox ESR 102.3.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00766 Published 2022-12-22 Partial fix · 106, 102.4 CWE-787
TI-2022-20915 CVE-2022-42929 · GHSA-6j29-45pf-r9wm

Uncontrolled resource consumption in Mozilla Firefox

Priority LOW 30

If a website called `window.print()` in a particular way, it could cause a denial of service of the browser, which may persist beyond browser restart depending on the user's session restore settings.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.00785 Published 2022-12-22 Partial fix · 106, 102.4 CWE-400