Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Release: Mozilla Firefox, Firefox ESR and 2 more products 100.0.2, 100.3.0, 91.9.1 Clear all filters
TI-2022-01668 CVE-2022-1802 · GHSA-p859-wprc-3cjx

Prototype pollution in Mozilla Firefox ESR

Priority HIGH 73

If an attacker was able to corrupt the methods of an Array object in JavaScript via prototype pollution, they could have achieved execution of attacker-controlled JavaScript code in a privileged context.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.28493 Published 2022-12-22 Partial fix · 91.9.1, 100.0.2 +1 CWE-1321
TI-2022-01402 CVE-2022-1529 · GHSA-grr5-5v7v-g4c4

Prototype pollution in Mozilla Firefox ESR

Priority MEDIUM 57

An attacker could have sent a message to the parent process where the contents were used to double-index into a JavaScript object, leading to prototype pollution and ultimately attacker-controlled JavaScript executing in…

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.17608 Published 2022-12-22 Partial fix · 91.9.1, 100.0.2 +1 CWE-1321