TI-2022-18100 CVE-2022-38478 · GHSA-c5f3-h7xh-cf2f
Out-of-bounds write in Mozilla Thunderbird
Priority MEDIUM 42
Members the Mozilla Fuzzing Team reported memory safety bugs present in Firefox 103, Firefox ESR 102.1, and Firefox ESR 91.12.
Vulnerabilities
3 records
TI-2022-18095 CVE-2022-38473 · GHSA-j9c4-m6g4-vjv3
A cross-origin iframe referencing an XSLT document would inherit the parent domain's…
Priority MEDIUM 41
A cross-origin iframe referencing an XSLT document would inherit the parent domain's permissions (such as microphone or camera access).
TI-2022-18094 CVE-2022-38472 · GHSA-rr53-g8m7-wrvf
Origin validation error in Mozilla Thunderbird
Priority LOW 29
An attacker could have abused XSLT error handling to associate attacker-controlled content with another origin which was displayed in the address bar.