Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

8 records

Release: Mozilla Firefox 103 Clear all filters
TI-2022-16667 CVE-2022-36320 · GHSA-c7rr-pw6j-xvp5

Out-of-bounds write in Mozilla Firefox

Priority MEDIUM 50

Mozilla developers and the Mozilla Fuzzing Team reported memory safety bugs present in Firefox 102.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00705 Published 2022-12-22 Fixed in 103 CWE-787
TI-2022-16666 CVE-2022-36319 · GHSA-4jxg-7cv4-3gcc

Clickjacking in Mozilla Firefox ESR

Priority MEDIUM 40

When combining CSS properties for overflow and transform, the mouse cursor could interact with different coordinates than displayed.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.0074 Published 2022-12-22 Partial fix · 102.1, 91.12 +1 CWE-1021
TI-2022-16665 CVE-2022-36318 · GHSA-3q68-3vrx-8h5f

Race condition in Mozilla Firefox ESR

Priority LOW 25

When visiting directory listings for `chrome://` URLs as source text, some parameters were reflected.

CVSS 3.1MEDIUM 5.3 Network No auth User interaction EPSS 0.0053 Published 2022-12-22 Partial fix · 102.1, 91.12 +1 CWE-362
TI-2022-16663 CVE-2022-36316 · GHSA-hj6m-j4xw-c8m8

Open redirect in Mozilla Firefox

Priority LOW 27

When using the Performance API, an attacker was able to notice subtle differences between PerformanceEntries and thus learn whether the target URL had been subject to a redirect.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00339 Published 2022-12-22 Fixed in 103 CWE-601
TI-2022-16662 CVE-2022-36315 · GHSA-vf28-r8mx-j24p

Insufficient verification of data authenticity in Mozilla Firefox

Priority LOW 19

When loading a script with Subresource Integrity, attackers with an injection capability could trigger the reuse of previously cached entries with incorrect, different integrity metadata.

CVSS 3.1MEDIUM 4.3 Network No auth User interaction EPSS 0.00209 Published 2022-12-22 Fixed in 103 CWE-345
TI-2022-16661 CVE-2022-36314 · GHSA-m6jf-wj3w-42j2

Uncontrolled search path in Mozilla Firefox ESR

Priority MEDIUM 58

When opening a Windows shortcut from the local filesystem, an attacker could supply a remote path that would lead to unexpected network requests from the operating system.<br>This bug only affects Firefox for Windows.

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.00224 Published 2022-12-22 Fixed in 102.1, 103 CWE-427
TI-2022-02315 CVE-2022-2505 · GHSA-mg2x-8rwm-j9cx

Out-of-bounds write in Mozilla Firefox ESR

Priority MEDIUM 41

Mozilla developers and the Mozilla Fuzzing Team reported memory safety bugs present in Firefox 102.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00798 Published 2022-12-22 Partial fix · 102.1, 103 CWE-787