TI-2022-18100 CVE-2022-38478 · GHSA-c5f3-h7xh-cf2f
Out-of-bounds write in Mozilla Thunderbird
Priority MEDIUM 42
Members the Mozilla Fuzzing Team reported memory safety bugs present in Firefox 103, Firefox ESR 102.1, and Firefox ESR 91.12.
Vulnerabilities
6 records
TI-2022-18099 CVE-2022-38477 · GHSA-79cc-3p55-rr77
Out-of-bounds write in Mozilla Firefox ESR
Priority MEDIUM 42
Mozilla developer Nika Layzell and the Mozilla Fuzzing Team reported memory safety bugs present in Firefox 103 and Firefox ESR 102.1.
TI-2022-18097 CVE-2022-38475 · GHSA-vwhh-g8g6-6pf7
Incorrect authorization in Mozilla Firefox
Priority LOW 29
An attacker could have written a value to the first element in a zero-length JavaScript array.
TI-2022-18096 CVE-2022-38474 · GHSA-c55w-hjjc-53ww
Exposure of resource to wrong sphere in Mozilla Firefox
Priority LOW 20
A website that had permission to access the microphone could record audio without the audio notification being shown.
TI-2022-18095 CVE-2022-38473 · GHSA-j9c4-m6g4-vjv3
A cross-origin iframe referencing an XSLT document would inherit the parent domain's…
Priority MEDIUM 41
A cross-origin iframe referencing an XSLT document would inherit the parent domain's permissions (such as microphone or camera access).
TI-2022-18094 CVE-2022-38472 · GHSA-rr53-g8m7-wrvf
Origin validation error in Mozilla Thunderbird
Priority LOW 29
An attacker could have abused XSLT error handling to associate attacker-controlled content with another origin which was displayed in the address bar.