Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

4 records

Release: Mozilla Firefox ESR, Thunderbird 102.4 Clear all filters
TI-2022-20918 CVE-2022-42932 · GHSA-mw2h-r48f-g8c9

Out-of-bounds write in Mozilla Firefox

Priority MEDIUM 41

Mozilla developers Ashley Hale and the Mozilla Fuzzing Team reported memory safety bugs present in Firefox 105 and Firefox ESR 102.3.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00766 Published 2022-12-22 Partial fix · 106, 102.4 CWE-787
TI-2022-20915 CVE-2022-42929 · GHSA-6j29-45pf-r9wm

Uncontrolled resource consumption in Mozilla Firefox

Priority LOW 30

If a website called `window.print()` in a particular way, it could cause a denial of service of the browser, which may persist beyond browser restart depending on the user's session restore settings.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.00785 Published 2022-12-22 Partial fix · 106, 102.4 CWE-400
TI-2022-20914 CVE-2022-42928 · GHSA-4jg9-9xg2-cc8h

NULL pointer dereference in Mozilla Firefox

Priority MEDIUM 42

Certain types of allocations were missing annotations that, if the Garbage Collector was in a specific state, could have lead to memory corruption and a potentially exploitable crash.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00892 Published 2022-12-22 Partial fix · 106, 102.4 CWE-476
TI-2022-20913 CVE-2022-42927 · GHSA-9jhw-8cjq-cxc8

Origin validation error in Mozilla Firefox

Priority HIGH 70

A same-origin policy violation could have allowed the theft of cross-origin URL entries, leaking the result of a redirect, via `performance.getEntries()`.

CVSS 3.1HIGH 8.1 Network No auth User interaction EPSS 0.00445 Published 2022-12-22 Partial fix · 106, 102.4 CWE-346