# CVEs published 2022-12-22 218 CVEs were published on December 22, 2022: 23 critical, 80 high. 2 are now in CISA KEV. Days are UTC. - [CVE-2022-23539](https://cve.now/CVE-2022-23539.md): jsonwebtoken unrestricted key type could lead to legacy keys usage (CVSS 5.9, auth0 node-jsonwebtoken · jsonwebtoken) - [CVE-2022-23513](https://cve.now/CVE-2022-23513.md): Pi-Hole/AdminLTE vulnerable due to improper access control in queryads endpoint (CVSS 5.3, pi-hole AdminLTE) - [CVE-2022-22449](https://cve.now/CVE-2022-22449.md): IBM Security Verify Governance, Identity Manager information disclosure (CVSS 5.3, IBM Security Verify Governance, Identity Manager) - [CVE-2022-45798](https://cve.now/CVE-2022-45798.md): A link following vulnerability in the Damage Cleanup Engine component of Trend Micro Apex One and Trend Micro Apex One as a Service could al (CVSS 7.8, Trend Micro Apex One) - [CVE-2022-22457](https://cve.now/CVE-2022-22457.md): IBM Security Verify Governance, Identity Manager information disclosure (CVSS 5.3, IBM Security Verify Governance, Identity Manager) - [CVE-2022-22458](https://cve.now/CVE-2022-22458.md): IBM Security Verify Governance, Identity Manager information disclosure (CVSS 6.3, IBM Security Verify Governance, Identity Manager) - [CVE-2022-22456](https://cve.now/CVE-2022-22456.md): IBM Security Verify Governance, Identity Manager cross-site scripting (CVSS 4.2, IBM Security Verify Governance, Identity Manager) - [CVE-2022-43860](https://cve.now/CVE-2022-43860.md): IBM Navigator for i SQL injection (CVSS 4.3, IBM Navigator for i) - [CVE-2022-43859](https://cve.now/CVE-2022-43859.md): IBM Navigator for i SQL injection (CVSS 6.3, IBM Navigator for i) - [CVE-2022-43858](https://cve.now/CVE-2022-43858.md): IBM Navigator for i information disclosure (CVSS 4.3, IBM Navigator for i) - [CVE-2022-3794](https://cve.now/CVE-2022-3794.md): Jeg Elementor Kit \<= 2.5.6 - Authorization Bypass (CVSS 5.4, jegtheme Jeg Kit for Elementor – Powerful Addons for Elemen…) - [CVE-2022-3805](https://cve.now/CVE-2022-3805.md): Jeg Elementor Kit \<= 2.5.6 - Unauthenticated Authorization Bypass (CVSS 8.6, jegtheme Jeg Kit for Elementor – Powerful Addons for Elemen…) - [CVE-2022-43857](https://cve.now/CVE-2022-43857.md): IBM Navigator for i information disclosure (CVSS 4.3, IBM Navigator for i) - [CVE-2022-22461](https://cve.now/CVE-2022-22461.md): IBM Security Verify Governance, Identity Manager information disclosure (CVSS 5.9, IBM Security Verify Governance, Identity Manager) - [CVE-2022-35646](https://cve.now/CVE-2022-35646.md): IBM Security Verify Governance, Identity Manager security bypass (CVSS 5.9, IBM Security Verify Governance, Identity Manager) - [CVE-2022-46170](https://cve.now/CVE-2022-46170.md): CodeIgniter is vulnerable to improper authentication via Session Handlers (CVSS 8.6, CodeIgniter4 · codeigniter4/framework) - [CVE-2022-38658](https://cve.now/CVE-2022-38658.md): HCL BigFix Server Automation (SA) is affected by a security vulnerability around Notification Service (CVSS 7.7, HCL Software BigFix Server Automation) - [CVE-2022-23556](https://cve.now/CVE-2022-23556.md): CodeIgniter is vulnerable to IP address spoofing when using proxy (CVSS 7.0, CodeIgniter4 · codeigniter4/framework) - [CVE-2022-23540](https://cve.now/CVE-2022-23540.md): jsonwebtoken vulnerable to signature validation bypass due to insecure default algorithm in jwt.verify() (CVSS 6.4, auth0 node-jsonwebtoken · jsonwebtoken) - [CVE-2022-23541](https://cve.now/CVE-2022-23541.md): jsonwebtoken's insecure implementation of key retrieval function could lead to Forgeable Public/Private Tokens from RSA to HMAC (CVSS 5.0, auth0 node-jsonwebtoken · jsonwebtoken) - [CVE-2022-45347](https://cve.now/CVE-2022-45347.md): Apache ShardingSphere-Proxy: MySQL authentication bypass (CVSS 9.8, Apache Software Foundation Apache ShardingSphere-Proxy · or…) - [CVE-2022-47896](https://cve.now/CVE-2022-47896.md): In JetBrains IntelliJ IDEA before 2022.3.1 code Templates were vulnerable to SSTI attacks. (CVSS 5.0, JetBrains IntelliJ IDEA) - [CVE-2022-47895](https://cve.now/CVE-2022-47895.md): In JetBrains IntelliJ IDEA before 2022.3.1 the "Validate JSP File" action used the HTTP protocol to download required JAR files. (CVSS 4.7, JetBrains IntelliJ IDEA) - [CVE-2020-15679](https://cve.now/CVE-2020-15679.md): An OAuth session fixation vulnerability existed in the VPN login flow, where an attacker could craft a custom login URL, convince a VPN user (CVSS 7.6, Mozilla VPN iOS · Mozilla VPN Windows +1) - [CVE-2020-15685](https://cve.now/CVE-2020-15685.md): During the plaintext phase of the STARTTLS connection setup, protocol commands could have been injected and evaluated within the encrypted s (CVSS 8.8, Mozilla Thunderbird) - [CVE-2020-36624](https://cve.now/CVE-2020-36624.md): ahorner text-helpers translation.rb reverse tabnabbing (CVSS 6.3, ahorner text-helpers · text\_helpers) - [CVE-2020-36625](https://cve.now/CVE-2020-36625.md): destiny.gg chat main.go websocket.Upgrader cross-site request forgery (CVSS 4.3, destiny.gg chat · github.com/destinygg/chat) - [CVE-2021-36631](https://cve.now/CVE-2021-36631.md): Untrusted search path vulnerability in Baidunetdisk Version 7.4.3 and earlier allows an attacker to gain privileges via a Trojan horse DLL i (CVSS 6.7) - [CVE-2021-4126](https://cve.now/CVE-2021-4126.md): When receiving an OpenPGP/MIME signed email message that contains an additional outer MIME message layer, for example a message footer added (CVSS 6.5, Mozilla Thunderbird) - [CVE-2021-4127](https://cve.now/CVE-2021-4127.md): An out of date graphics library (Angle) likely contained vulnerabilities that could potentially be exploited. (CVSS 9.8, Mozilla Thunderbird · Mozilla Firefox ESR) - [CVE-2021-4128](https://cve.now/CVE-2021-4128.md): When transitioning in and out of fullscreen mode, a graphics object was not correctly protected; resulting in memory corruption and a potent (CVSS 6.5, Mozilla Firefox) - [CVE-2021-4129](https://cve.now/CVE-2021-4129.md): Mozilla developers and community members Julian Hector, Randell Jesup, Gabriele Svelto, Tyson Smith, Christian Holler, and Masayuki Nakano r (CVSS 9.8, Mozilla Firefox · Mozilla Thunderbird) - [CVE-2021-4140](https://cve.now/CVE-2021-4140.md): It was possible to construct specific XSLT markup that would be able to bypass an iframe sandbox. (CVSS 9.8, Mozilla Firefox ESR · Mozilla Firefox +1) - [CVE-2021-4221](https://cve.now/CVE-2021-4221.md): If a domain name contained a RTL character, it would cause the domain to be rendered to the right of the path. (CVSS 4.3, Mozilla Firefox) - [CVE-2021-43657](https://cve.now/CVE-2021-43657.md): A Stored Cross-site scripting (XSS) vulnerability via MAster.php in Sourcecodetester Simple Client Management System (SCMS) 1.0 allows remot (CVSS 5.4) - [CVE-2022-0511](https://cve.now/CVE-2022-0511.md): Mozilla developers and community members Gabriele Svelto, Sebastian Hengst, Randell Jesup, Luan Herrera, Lars T Hansen, and the Mozilla Fuzz (CVSS 8.8, Mozilla Firefox) - [CVE-2022-0517](https://cve.now/CVE-2022-0517.md): Mozilla VPN can load an OpenSSL configuration file from an unsecured directory. (CVSS 7.8, Mozilla VPN) - [CVE-2022-0566](https://cve.now/CVE-2022-0566.md): It may be possible for an attacker to craft an email message that causes Thunderbird to perform an out-of-bounds write of one byte when proc (CVSS 8.8, Mozilla Thunderbird) - [CVE-2022-0843](https://cve.now/CVE-2022-0843.md): Mozilla developers Kershaw Chang, Ryan VanderMeulen, and Randell Jesup reported memory safety bugs present in Firefox 97. (CVSS 8.8, Mozilla Firefox) - [CVE-2022-1097](https://cve.now/CVE-2022-1097.md): \NSSToken\ objects were referenced via direct points, and could have been accessed in an unsafe way on different threads, leading (CVSS 6.5, Mozilla Thunderbird · Mozilla Firefox) - [CVE-2022-1196](https://cve.now/CVE-2022-1196.md): After a VR Process is destroyed, a reference to it may have been retained and used, leading to a use-after-free and potentially exploitable (CVSS 6.5, Mozilla Thunderbird · Mozilla Firefox ESR) - [CVE-2022-1197](https://cve.now/CVE-2022-1197.md): When importing a revoked key that specified key compromise as the revocation reason, Thunderbird did not update the existing copy of the key (CVSS 5.4, Mozilla Thunderbird) - [CVE-2022-1520](https://cve.now/CVE-2022-1520.md): When viewing an email message A, which contains an attached message B, where B is encrypted or digitally signed or both, Thunderbird may sho (CVSS 4.3, Mozilla Thunderbird) - [CVE-2022-1529](https://cve.now/CVE-2022-1529.md): An attacker could have sent a message to the parent process where the contents were used to double-index into a JavaScript object, leading t (CVSS 8.8, Mozilla Firefox ESR · Mozilla Firefox +1) - [CVE-2022-1802](https://cve.now/CVE-2022-1802.md): If an attacker was able to corrupt the methods of an Array object in JavaScript via prototype pollution, they could have achieved execution (CVSS 8.8, Mozilla Firefox ESR · Mozilla Firefox +1) - [CVE-2022-1834](https://cve.now/CVE-2022-1834.md): When displaying the sender of an email, and the sender name contained the Braille Pattern Blank space character multiple times, Thunderbird (CVSS 6.5, Mozilla Thunderbird) - [CVE-2022-1887](https://cve.now/CVE-2022-1887.md): The search term could have been specified externally to trigger SQL injection. (CVSS 9.8, Mozilla Firefox for iOS) - [CVE-2022-2200](https://cve.now/CVE-2022-2200.md): If an object prototype was corrupted by an attacker, they would have been able to set undesired attributes on a JavaScript object, leading t (CVSS 8.8, Mozilla Firefox · Mozilla Thunderbird) - [CVE-2022-2226](https://cve.now/CVE-2022-2226.md): An OpenPGP digital signature includes information about the date when the signature was created. (CVSS 6.5, Mozilla Thunderbird) - [CVE-2022-22736](https://cve.now/CVE-2022-22736.md): If Firefox was installed to a world-writable directory, a local privilege escalation could occur when Firefox searched the current directory (CVSS 7.0, Mozilla Firefox) - [CVE-2022-22737](https://cve.now/CVE-2022-22737.md): Constructing audio sinks could have lead to a race condition when playing audio files and closing windows. (CVSS 7.5, Mozilla Firefox ESR · Mozilla Firefox +1) - [CVE-2022-22738](https://cve.now/CVE-2022-22738.md): Applying a CSS filter effect could have accessed out of bounds memory. (CVSS 8.8, Mozilla Firefox ESR · Mozilla Firefox +1) - [CVE-2022-22739](https://cve.now/CVE-2022-22739.md): Malicious websites could have tricked users into accepting launching a program to handle an external URL protocol. (CVSS 6.5, Mozilla Firefox ESR · Mozilla Firefox +1) - [CVE-2022-22740](https://cve.now/CVE-2022-22740.md): Certain network request objects were freed too early when releasing a network request handle. (CVSS 8.8, Mozilla Firefox ESR · Mozilla Firefox +1) - [CVE-2022-22741](https://cve.now/CVE-2022-22741.md): When resizing a popup while requesting fullscreen access, the popup would have become unable to leave fullscreen mode. (CVSS 7.5, Mozilla Firefox ESR · Mozilla Firefox +1) - [CVE-2022-22742](https://cve.now/CVE-2022-22742.md): When inserting text while in edit mode, some characters might have lead to out-of-bounds memory access causing a potentially exploitable cra (CVSS 6.5, Mozilla Firefox ESR · Mozilla Firefox +1) - [CVE-2022-22743](https://cve.now/CVE-2022-22743.md): When navigating from inside an iframe while requesting fullscreen access, an attacker-controlled tab could have made the browser unable to l (CVSS 4.3, Mozilla Firefox ESR · Mozilla Firefox +1) - [CVE-2022-22744](https://cve.now/CVE-2022-22744.md): The constructed curl command from the "Copy as curl" feature in DevTools was not properly escaped for PowerShell. (CVSS 8.8, Mozilla Firefox ESR · Mozilla Firefox +1) - [CVE-2022-22745](https://cve.now/CVE-2022-22745.md): Securitypolicyviolation events could have leaked cross-origin information for frame-ancestors violations. (CVSS 6.5, Mozilla Firefox ESR · Mozilla Firefox +1) - [CVE-2022-22746](https://cve.now/CVE-2022-22746.md): A race condition could have allowed bypassing the fullscreen notification which could have lead to a fullscreen window spoof being unnoticed (CVSS 5.9, Mozilla Firefox ESR · Mozilla Firefox +1) - [CVE-2022-22747](https://cve.now/CVE-2022-22747.md): After accepting an untrusted certificate, handling an empty pkcs7 sequence as part of the certificate data could have lead to a crash. (CVSS 6.5, Mozilla Firefox ESR · Mozilla Firefox +1) - [CVE-2022-22748](https://cve.now/CVE-2022-22748.md): Malicious websites could have confused Firefox into showing the wrong origin when asking to launch a program and handling an external URL pr (CVSS 6.5, Mozilla Firefox ESR · Mozilla Firefox +1) - [CVE-2022-22749](https://cve.now/CVE-2022-22749.md): When scanning QR codes, Firefox for Android would have allowed navigation to some URLs that do not point to web content.\\*This bug only a (CVSS 4.3, Mozilla Firefox) - [CVE-2022-22750](https://cve.now/CVE-2022-22750.md): By generally accepting and passing resource handles across processes, a compromised content process might have confused higher privileged pr (CVSS 6.5, Mozilla Firefox) - [CVE-2022-22751](https://cve.now/CVE-2022-22751.md): Mozilla developers Calixte Denizet, Kershaw Chang, Christian Holler, Jason Kratzer, Gabriele Svelto, Tyson Smith, Simon Giesecke, and Steve (CVSS 8.8, Mozilla Firefox ESR · Mozilla Firefox +1) - [CVE-2022-22752](https://cve.now/CVE-2022-22752.md): Mozilla developers Christian Holler and Jason Kratzer reported memory safety bugs present in Firefox 95. (CVSS 8.8, Mozilla Firefox) - [CVE-2022-22753](https://cve.now/CVE-2022-22753.md): A Time-of-Check Time-of-Use bug existed in the Maintenance (Updater) Service that could be abused to grant Users write access to an arbitrar (CVSS 7.1, Mozilla Firefox · Mozilla Thunderbird) - [CVE-2022-22754](https://cve.now/CVE-2022-22754.md): If a user installed an extension of a particular type, the extension could have auto-updated itself and while doing so, bypass the prompt wh (CVSS 6.5, Mozilla Firefox · Mozilla Thunderbird) - [CVE-2022-22755](https://cve.now/CVE-2022-22755.md): By using XSL Transforms, a malicious webserver could have served a user an XSL document that would continue to execute JavaScript (within th (CVSS 8.8, Mozilla Firefox) - [CVE-2022-22756](https://cve.now/CVE-2022-22756.md): If a user was convinced to drag and drop an image to their desktop or other folder, the resulting object could have been changed into an exe (CVSS 8.8, Mozilla Firefox · Mozilla Thunderbird) - [CVE-2022-22757](https://cve.now/CVE-2022-22757.md): Remote Agent, used in WebDriver, did not validate the Host or Origin headers. (CVSS 6.5, Mozilla Firefox) - [CVE-2022-22758](https://cve.now/CVE-2022-22758.md): When clicking on a tel: link, USSD codes, specified after a \\\\*\ character, would be included in the phone number. (CVSS 8.8, Mozilla Firefox) - [CVE-2022-22759](https://cve.now/CVE-2022-22759.md): If a document created a sandboxed iframe without \allow-scripts\, and subsequently appended an element to the iframe's document t (CVSS 9.6, Mozilla Firefox · Mozilla Thunderbird) - [CVE-2022-22760](https://cve.now/CVE-2022-22760.md): When importing resources using Web Workers, error messages would distinguish the difference between \application/javascript\ resp (CVSS 6.5, Mozilla Firefox · Mozilla Thunderbird) - [CVE-2022-22761](https://cve.now/CVE-2022-22761.md): Web-accessible extension pages (pages with a moz-extension:// scheme) were not correctly enforcing the frame-ancestors directive when it was (CVSS 8.8, Mozilla Firefox · Mozilla Thunderbird) - [CVE-2022-22762](https://cve.now/CVE-2022-22762.md): Under certain circumstances, a JavaScript alert (or prompt) could have been shown while another website was displayed underneath it. (CVSS 4.3, Mozilla Firefox) - [CVE-2022-22763](https://cve.now/CVE-2022-22763.md): When a worker is shutdown, it was possible to cause script to run late in the lifecycle, at a point after where it should not be possible. (CVSS 8.8, Mozilla Firefox · Mozilla Thunderbird) - [CVE-2022-22764](https://cve.now/CVE-2022-22764.md): Mozilla developers Paul Adenot and the Mozilla Fuzzing Team reported memory safety bugs present in Firefox 96 and Firefox ESR 91.5. (CVSS 8.8, Mozilla Firefox · Mozilla Thunderbird) - [CVE-2022-2505](https://cve.now/CVE-2022-2505.md): Mozilla developers and the Mozilla Fuzzing Team reported memory safety bugs present in Firefox 102. (CVSS 8.8, Mozilla Firefox ESR · Mozilla Firefox +1) - [CVE-2022-26381](https://cve.now/CVE-2022-26381.md): An attacker could have caused a use-after-free by forcing a text reflow in an SVG object leading to a potentially exploitable crash. (CVSS 8.8, Mozilla Firefox · Mozilla Thunderbird) - [CVE-2022-26382](https://cve.now/CVE-2022-26382.md): While the text displayed in Autofill tooltips cannot be directly read by JavaScript, the text was rendered using page fonts. (CVSS 4.3, Mozilla Firefox) - [CVE-2022-26383](https://cve.now/CVE-2022-26383.md): When resizing a popup after requesting fullscreen access, the popup would not display the fullscreen notification. (CVSS 4.3, Mozilla Firefox · Mozilla Thunderbird) - [CVE-2022-26384](https://cve.now/CVE-2022-26384.md): If an attacker could control the contents of an iframe sandboxed with \allow-popups\ but not \allow-scripts\, they wer (CVSS 9.6, Mozilla Firefox · Mozilla Thunderbird) - [CVE-2022-26385](https://cve.now/CVE-2022-26385.md): In unusual circumstances, an individual thread may outlive the thread's manager during shutdown. (CVSS 6.5, Mozilla Firefox) - [CVE-2022-26386](https://cve.now/CVE-2022-26386.md): Previously Firefox for macOS and Linux would download temporary files to a user-specific directory in \/tmp\, but this behavior w (CVSS 6.5, Mozilla Firefox ESR · Mozilla Thunderbird) - [CVE-2022-26387](https://cve.now/CVE-2022-26387.md): When installing an add-on, Firefox verified the signature before prompting the user; but while the user was confirming the prompt, the under (CVSS 7.5, Mozilla Firefox · Mozilla Thunderbird) - [CVE-2022-26485](https://cve.now/CVE-2022-26485.md): Removing an XSLT parameter during processing could have lead to an exploitable use-after-free. (CVSS 8.8, KEV, Mozilla Firefox · Mozilla Thunderbird +1) - [CVE-2022-26486](https://cve.now/CVE-2022-26486.md): An unexpected message in the WebGPU IPC framework could lead to a use-after-free and exploitable sandbox escape. (CVSS 9.6, KEV, Mozilla Firefox · Mozilla Thunderbird +1) - [CVE-2022-28281](https://cve.now/CVE-2022-28281.md): If a compromised content process sent an unexpected number of WebAuthN Extensions in a Register command to the parent process, an out of bou (CVSS 8.8, Mozilla Thunderbird · Mozilla Firefox) - [CVE-2022-28282](https://cve.now/CVE-2022-28282.md): By using a link with \rel="localization"\ a use-after-free could have been triggered by destroying an object during JavaScript ex (CVSS 6.5, Mozilla Thunderbird · Mozilla Firefox) - [CVE-2022-28283](https://cve.now/CVE-2022-28283.md): The sourceMapURL feature in devtools was missing security checks that would have allowed a webpage to attempt to include local files or othe (CVSS 6.5, Mozilla Firefox) - [CVE-2022-28284](https://cve.now/CVE-2022-28284.md): SVG's \<use>\ element could have been used to load unexpected content that could have executed script in certain circumstan (CVSS 8.8, Mozilla Firefox) - [CVE-2022-28285](https://cve.now/CVE-2022-28285.md): When generating the assembly code for \MLoadTypedArrayElementHole\, an incorrect AliasSet was used. (CVSS 6.5, Mozilla Thunderbird · Mozilla Firefox) - [CVE-2022-28286](https://cve.now/CVE-2022-28286.md): Due to a layout change, iframe contents could have been rendered outside of its border. (CVSS 5.4, Mozilla Thunderbird · Mozilla Firefox) - [CVE-2022-28287](https://cve.now/CVE-2022-28287.md): In unusual circumstances, selecting text could cause text selection caching to behave incorrectly, leading to a crash. (CVSS 6.5, Mozilla Firefox) - [CVE-2022-28288](https://cve.now/CVE-2022-28288.md): Mozilla developers and community members Randell Jesup, Sebastian Hengst, and the Mozilla Fuzzing Team reported memory safety bugs present i (CVSS 8.8, Mozilla Firefox) - [CVE-2022-28289](https://cve.now/CVE-2022-28289.md): Mozilla developers and community members Nika Layzell, Andrew McCreight, Gabriele Svelto, and the Mozilla Fuzzing Team reported memory safet (CVSS 8.8, Mozilla Thunderbird · Mozilla Firefox) - [CVE-2022-29909](https://cve.now/CVE-2022-29909.md): Documents in deeply-nested cross-origin browsing contexts could have obtained permissions granted to the top-level origin, bypassing the exi (CVSS 8.8, Mozilla Thunderbird · Mozilla Firefox ESR +1) - [CVE-2022-29910](https://cve.now/CVE-2022-29910.md): When closed or sent to the background, Firefox for Android would not properly record and persist HSTS settings.\\*Note: This issue only af (CVSS 6.1, Mozilla Firefox) - [CVE-2022-29911](https://cve.now/CVE-2022-29911.md): An improper implementation of the new iframe sandbox keyword \allow-top-navigation-by-user-activation\ could lead to script execu (CVSS 6.1, Mozilla Thunderbird · Mozilla Firefox ESR +1) - [CVE-2022-29912](https://cve.now/CVE-2022-29912.md): Requests initiated through reader mode did not properly omit cookies with a SameSite attribute. (CVSS 6.1, Mozilla Thunderbird · Mozilla Firefox ESR +1) - [CVE-2022-29913](https://cve.now/CVE-2022-29913.md): The parent process would not properly check whether the Speech Synthesis feature is enabled, when receiving instructions from a child proces (CVSS 6.5, Mozilla Thunderbird) - [CVE-2022-29914](https://cve.now/CVE-2022-29914.md): When reusing existing popups Firefox would have allowed them to cover the fullscreen notification UI, which could have enabled browser spoof (CVSS 6.5, Mozilla Thunderbird · Mozilla Firefox ESR +1) - [CVE-2022-29915](https://cve.now/CVE-2022-29915.md): The Performance API did not properly hide the fact whether a request cross-origin resource has observed redirects. (CVSS 4.3, Mozilla Firefox) - [CVE-2022-29916](https://cve.now/CVE-2022-29916.md): Firefox behaved slightly differently for already known resources when loading CSS resources involving CSS variables. (CVSS 6.5, Mozilla Thunderbird · Mozilla Firefox ESR +1) - [CVE-2022-29917](https://cve.now/CVE-2022-29917.md): Mozilla developers Andrew McCreight, Gabriele Svelto, Tom Ritter and the Mozilla Fuzzing Team reported memory safety bugs present in Firefox (CVSS 9.8, Mozilla Thunderbird · Mozilla Firefox ESR +1) - [CVE-2022-29918](https://cve.now/CVE-2022-29918.md): Mozilla developers Gabriele Svelto, Randell Jesup and the Mozilla Fuzzing Team reported memory safety bugs present in Firefox 99. (CVSS 8.8, Mozilla Firefox) - [CVE-2022-3032](https://cve.now/CVE-2022-3032.md): When receiving an HTML email that contained an \iframe\ element, which used a \srcdoc\ attribute to define the inner H (no CVSS, Mozilla Thunderbird) - [CVE-2022-3033](https://cve.now/CVE-2022-3033.md): If a Thunderbird user replied to a crafted HTML email containing a \meta\ tag, with the \meta\ tag having the \ht (CVSS 8.1, Mozilla Thunderbird) - [CVE-2022-3034](https://cve.now/CVE-2022-3034.md): When receiving an HTML email that specified to load an \iframe\ element from a remote location, a request to the remote document (CVSS 4.3, Mozilla Thunderbird) - [CVE-2022-3155](https://cve.now/CVE-2022-3155.md): When saving or opening an email attachment on macOS, Thunderbird did not set attribute com.apple.quarantine on the received file. (CVSS 7.8, Mozilla Thunderbird) - [CVE-2022-31736](https://cve.now/CVE-2022-31736.md): A malicious website could have learned the size of a cross-origin resource that supported Range requests. (CVSS 9.8, Mozilla Thunderbird · Mozilla Firefox) - [CVE-2022-31737](https://cve.now/CVE-2022-31737.md): A malicious webpage could have caused an out-of-bounds write in WebGL, leading to memory corruption and a potentially exploitable crash. (CVSS 9.8, Mozilla Thunderbird · Mozilla Firefox) - [CVE-2022-31738](https://cve.now/CVE-2022-31738.md): When exiting fullscreen mode, an iframe could have confused the browser about the current state of fullscreen, resulting in potential user c (CVSS 6.5, Mozilla Thunderbird · Mozilla Firefox) - [CVE-2022-31739](https://cve.now/CVE-2022-31739.md): When downloading files on Windows, the % character was not escaped, which could have lead to a download incorrectly being saved to attacker- (CVSS 8.8, Mozilla Thunderbird · Mozilla Firefox) - [CVE-2022-31740](https://cve.now/CVE-2022-31740.md): On arm64, WASM code could have resulted in incorrect assembly generation leading to a register allocation problem, and a potentially exploit (CVSS 8.8, Mozilla Thunderbird · Mozilla Firefox) - [CVE-2022-31741](https://cve.now/CVE-2022-31741.md): A crafted CMS message could have been processed incorrectly, leading to an invalid memory read, and potentially further memory corruption. (CVSS 8.8, Mozilla Thunderbird · Mozilla Firefox) - [CVE-2022-31742](https://cve.now/CVE-2022-31742.md): An attacker could have exploited a timing attack by sending a large number of allowCredential entries and detecting the difference between i (CVSS 6.5, Mozilla Thunderbird · Mozilla Firefox) - [CVE-2022-31743](https://cve.now/CVE-2022-31743.md): Firefox's HTML parser did not correctly interpret HTML comment tags, resulting in an incongruity with other browsers. (CVSS 6.5, Mozilla Firefox) - [CVE-2022-31744](https://cve.now/CVE-2022-31744.md): An attacker could have injected CSS into stylesheets accessible via internal URIs, such as resource:, and in doing so bypass a page's Conten (CVSS 6.5, Mozilla Firefox ESR · Mozilla Thunderbird +1) - [CVE-2022-31745](https://cve.now/CVE-2022-31745.md): If array shift operations are not used, the Garbage Collector may have become confused about valid objects. (CVSS 4.3, Mozilla Firefox) - [CVE-2022-31746](https://cve.now/CVE-2022-31746.md): Internal URLs are protected by a secret UUID key, which could have been leaked to web page through the Referrer header. (CVSS 6.5, Mozilla Firefox for iOS) - [CVE-2022-31747](https://cve.now/CVE-2022-31747.md): Mozilla developers Andrew McCreight, Nicolas B. (CVSS 9.8, Mozilla Thunderbird · Mozilla Firefox) - [CVE-2022-31748](https://cve.now/CVE-2022-31748.md): Mozilla developers Gabriele Svelto, Timothy Nikkel, Randell Jesup, Jon Coppeard, and the Mozilla Fuzzing Team reported memory safety bugs pr (CVSS 9.8, Mozilla Firefox) - [CVE-2022-3266](https://cve.now/CVE-2022-3266.md): An out-of-bounds read can occur when decoding H264 video. (CVSS 5.5, Mozilla Firefox ESR · Mozilla Thunderbird +1) - [CVE-2022-34468](https://cve.now/CVE-2022-34468.md): An iframe that was not permitted to run scripts could do so if the user clicked on a \javascript:\ link. (CVSS 8.8, Mozilla Firefox · Mozilla Thunderbird) - [CVE-2022-34469](https://cve.now/CVE-2022-34469.md): When a TLS Certificate error occurs on a domain protected by the HSTS header, the browser should not allow the user to bypass the certificat (CVSS 8.8, Mozilla Firefox) - [CVE-2022-34470](https://cve.now/CVE-2022-34470.md): Session history navigations may have led to a use-after-free and potentially exploitable crash. (CVSS 9.8, Mozilla Firefox · Mozilla Thunderbird) - [CVE-2022-34471](https://cve.now/CVE-2022-34471.md): When downloading an update for an addon, the downloaded addon update's version was not verified to match the version selected from the manif (CVSS 6.5, Mozilla Firefox) - [CVE-2022-34472](https://cve.now/CVE-2022-34472.md): If there was a PAC URL set and the server that hosts the PAC was not reachable, OCSP requests would have been blocked, resulting in incorrec (CVSS 4.3, Mozilla Firefox · Mozilla Thunderbird) - [CVE-2022-34473](https://cve.now/CVE-2022-34473.md): The HTML Sanitizer should have sanitized the \href\ attribute of SVG \<use>\ tags; however it incorrectly did no (CVSS 6.1, Mozilla Firefox) - [CVE-2022-34474](https://cve.now/CVE-2022-34474.md): Even when an iframe was sandboxed with \allow-top-navigation-by-user-activation\, if it received a redirect header to an external (CVSS 6.1, Mozilla Firefox) - [CVE-2022-34475](https://cve.now/CVE-2022-34475.md): SVG \<use>\ tags that referenced a same-origin document could have resulted in script execution if attacker input was sanit (CVSS 6.1, Mozilla Firefox) - [CVE-2022-34476](https://cve.now/CVE-2022-34476.md): ASN.1 parsing of an indefinite SEQUENCE inside an indefinite GROUP could have resulted in the parser accepting malformed ASN.1. (CVSS 9.8, Mozilla Firefox) - [CVE-2022-34477](https://cve.now/CVE-2022-34477.md): The MediaError message property should be consistent to avoid leaking information about cross-origin resources; however for a same-site cros (CVSS 7.5, Mozilla Firefox) - [CVE-2022-34478](https://cve.now/CVE-2022-34478.md): The \ms-msdt\, \search\, and \search-ms\ protocols deliver content to Microsoft applications, bypassing the (CVSS 6.5, Mozilla Firefox · Mozilla Thunderbird) - [CVE-2022-34479](https://cve.now/CVE-2022-34479.md): A malicious website that could create a popup could have resized the popup to overlay the address bar with its own content, resulting in pot (CVSS 6.5, Mozilla Firefox · Mozilla Thunderbird) - [CVE-2022-34480](https://cve.now/CVE-2022-34480.md): Within the \lg\_init()\ function, if several allocations succeed but then one fails, an uninitialized pointer would have been free (CVSS 8.8, Mozilla Firefox) - [CVE-2022-34481](https://cve.now/CVE-2022-34481.md): In the \nsTArray\_Impl::ReplaceElementsAt()\ function, an integer overflow could have occurred when the number of elements to repl (CVSS 8.8, Mozilla Firefox · Mozilla Thunderbird) - [CVE-2022-34482](https://cve.now/CVE-2022-34482.md): An attacker who could have convinced a user to drag and drop an image to a filesystem could have manipulated the resulting filename to conta (CVSS 8.8, Mozilla Firefox) - [CVE-2022-34483](https://cve.now/CVE-2022-34483.md): An attacker who could have convinced a user to drag and drop an image to a filesystem could have manipulated the resulting filename to conta (CVSS 8.8, Mozilla Firefox) - [CVE-2022-34484](https://cve.now/CVE-2022-34484.md): The Mozilla Fuzzing Team reported potential vulnerabilities present in Thunderbird 91.10. (CVSS 8.8, Mozilla Firefox · Mozilla Thunderbird) - [CVE-2022-34485](https://cve.now/CVE-2022-34485.md): Mozilla developers Bryce Seager van Dyk and the Mozilla Fuzzing Team reported potential vulnerabilities present in Firefox 101. (CVSS 9.8, Mozilla Firefox) - [CVE-2022-36314](https://cve.now/CVE-2022-36314.md): When opening a Windows shortcut from the local filesystem, an attacker could supply a remote path that would lead to unexpected network requ (CVSS 5.5, Mozilla Firefox ESR · Mozilla Firefox +1) - [CVE-2022-36315](https://cve.now/CVE-2022-36315.md): When loading a script with Subresource Integrity, attackers with an injection capability could trigger the reuse of previously cached entrie (CVSS 4.3, Mozilla Firefox) - [CVE-2022-36316](https://cve.now/CVE-2022-36316.md): When using the Performance API, an attacker was able to notice subtle differences between PerformanceEntries and thus learn whether the targ (CVSS 6.1, Mozilla Firefox) - [CVE-2022-36317](https://cve.now/CVE-2022-36317.md): When visiting a website with an overly long URL, the user interface would start to hang. (CVSS 6.5, Mozilla Firefox) - [CVE-2022-36318](https://cve.now/CVE-2022-36318.md): When visiting directory listings for \`chrome://\` URLs as source text, some parameters were reflected. (CVSS 5.3, Mozilla Firefox ESR · Mozilla Firefox +1) - [CVE-2022-36319](https://cve.now/CVE-2022-36319.md): When combining CSS properties for overflow and transform, the mouse cursor could interact with different coordinates than displayed. (CVSS 7.5, Mozilla Firefox ESR · Mozilla Firefox +1) - [CVE-2022-36320](https://cve.now/CVE-2022-36320.md): Mozilla developers and the Mozilla Fuzzing Team reported memory safety bugs present in Firefox 102. (CVSS 9.8, Mozilla Firefox) - [CVE-2022-38472](https://cve.now/CVE-2022-38472.md): An attacker could have abused XSLT error handling to associate attacker-controlled content with another origin which was displayed in the ad (CVSS 6.5, Mozilla Thunderbird · Mozilla Firefox ESR +1) - [CVE-2022-38473](https://cve.now/CVE-2022-38473.md): A cross-origin iframe referencing an XSLT document would inherit the parent domain's permissions (such as microphone or camera access). (CVSS 8.8, Mozilla Thunderbird · Mozilla Firefox ESR +1) - [CVE-2022-38474](https://cve.now/CVE-2022-38474.md): A website that had permission to access the microphone could record audio without the audio notification being shown. (CVSS 4.3, Mozilla Firefox) - [CVE-2022-38475](https://cve.now/CVE-2022-38475.md): An attacker could have written a value to the first element in a zero-length JavaScript array. (CVSS 6.5, Mozilla Firefox) - [CVE-2022-38476](https://cve.now/CVE-2022-38476.md): A data race could occur in the \PK11\_ChangePW\ function, potentially leading to a use-after-free vulnerability. (CVSS 7.5, Mozilla Firefox ESR · Mozilla Thunderbird) - [CVE-2022-38477](https://cve.now/CVE-2022-38477.md): Mozilla developer Nika Layzell and the Mozilla Fuzzing Team reported memory safety bugs present in Firefox 103 and Firefox ESR 102.1. (CVSS 8.8, Mozilla Firefox ESR · Mozilla Thunderbird +1) - [CVE-2022-38478](https://cve.now/CVE-2022-38478.md): Members the Mozilla Fuzzing Team reported memory safety bugs present in Firefox 103, Firefox ESR 102.1, and Firefox ESR 91.12. (CVSS 8.8, Mozilla Thunderbird · Mozilla Firefox ESR +1) - [CVE-2022-40897](https://cve.now/CVE-2022-40897.md): Python Packaging Authority (PyPA) setuptools before 65.5.1 allows remote attackers to cause a denial of service via HTML in a crafted packag (CVSS 5.9, setuptools) - [CVE-2022-40898](https://cve.now/CVE-2022-40898.md): An issue discovered in Python Packaging Authority (PyPA) Wheel 0.37.1 and earlier allows remote attackers to cause a denial of service via a (CVSS 7.5, wheel) - [CVE-2022-40899](https://cve.now/CVE-2022-40899.md): An issue discovered in Python Charmers Future 0.18.2 and earlier allows remote attackers to cause a denial of service via crafted Set-Cookie (CVSS 7.5, future) - [CVE-2022-40956](https://cve.now/CVE-2022-40956.md): When injecting an HTML base element, some requests would ignore the CSP's base-uri settings and accept the injected element's base instead. (CVSS 6.1, Mozilla Firefox ESR · Mozilla Thunderbird +1) - [CVE-2022-40957](https://cve.now/CVE-2022-40957.md): Inconsistent data in instruction and data cache when creating wasm code could lead to a potentially exploitable crash.\\*This bug only aff (CVSS 6.5, Mozilla Firefox ESR · Mozilla Thunderbird +1) - [CVE-2022-40958](https://cve.now/CVE-2022-40958.md): By injecting a cookie with certain special characters, an attacker on a shared subdomain which is not a secure context could set and thus ov (CVSS 6.5, Mozilla Firefox ESR · Mozilla Thunderbird +1) - [CVE-2022-40959](https://cve.now/CVE-2022-40959.md): During iframe navigation, certain pages did not have their FeaturePolicy fully initialized leading to a bypass that leaked device permission (CVSS 6.5, Mozilla Firefox ESR · Mozilla Thunderbird +1) - [CVE-2022-40960](https://cve.now/CVE-2022-40960.md): Concurrent use of the URL parser with non-UTF-8 data was not thread-safe. (CVSS 6.5, Mozilla Firefox ESR · Mozilla Thunderbird +1) - [CVE-2022-40961](https://cve.now/CVE-2022-40961.md): During startup, a graphics driver with an unexpected name could lead to a stack-buffer overflow causing a potentially exploitable crash.\ (CVSS 6.5, Mozilla Firefox) - [CVE-2022-40962](https://cve.now/CVE-2022-40962.md): Mozilla developers Nika Layzell, Timothy Nikkel, Sebastian Hengst, Andreas Pehrson, and the Mozilla Fuzzing Team reported memory safety bugs (CVSS 8.8, Mozilla Firefox ESR · Mozilla Thunderbird +1) - [CVE-2022-42927](https://cve.now/CVE-2022-42927.md): A same-origin policy violation could have allowed the theft of cross-origin URL entries, leaking the result of a redirect, via \`performance. (CVSS 8.1, Mozilla Firefox · Mozilla Thunderbird) - [CVE-2022-42928](https://cve.now/CVE-2022-42928.md): Certain types of allocations were missing annotations that, if the Garbage Collector was in a specific state, could have lead to memory corr (CVSS 8.8, Mozilla Firefox · Mozilla Thunderbird) - [CVE-2022-42929](https://cve.now/CVE-2022-42929.md): If a website called \`window.print()\` in a particular way, it could cause a denial of service of the browser, which may persist beyond browse (CVSS 6.5, Mozilla Firefox · Mozilla Thunderbird) - [CVE-2022-42930](https://cve.now/CVE-2022-42930.md): If two Workers were simultaneously initializing their CacheStorage, a data race could have occurred in the \`ThirdPartyUtil\` component. (CVSS 7.1, Mozilla Firefox) - [CVE-2022-42931](https://cve.now/CVE-2022-42931.md): Logins saved by Firefox should be managed by the Password Manager component which uses encryption to save files on-disk. (CVSS 3.3, Mozilla Firefox) - [CVE-2022-42932](https://cve.now/CVE-2022-42932.md): Mozilla developers Ashley Hale and the Mozilla Fuzzing Team reported memory safety bugs present in Firefox 105 and Firefox ESR 102.3. (CVSS 8.8, Mozilla Firefox · Mozilla Thunderbird) - [CVE-2022-43271](https://cve.now/CVE-2022-43271.md): Inhabit Systems Pty Ltd Move CRM version 4, build 260 was discovered to contain a cross-site scripting (XSS) vulnerability via the User prof (CVSS 5.4) - [CVE-2022-45403](https://cve.now/CVE-2022-45403.md): Service Workers should not be able to infer information about opaque cross-origin responses; but timing information for cross-origin media c (CVSS 6.5, Mozilla Firefox ESR · Mozilla Thunderbird +1) - [CVE-2022-45404](https://cve.now/CVE-2022-45404.md): Through a series of popup and \window.print()\ calls, an attacker can cause a window to go fullscreen without the user seeing the (CVSS 6.5, Mozilla Firefox ESR · Mozilla Thunderbird +1) - [CVE-2022-45405](https://cve.now/CVE-2022-45405.md): Freeing arbitrary \nsIInputStream\'s on a different thread than creation could have led to a use-after-free and potentially explo (CVSS 6.5, Mozilla Firefox ESR · Mozilla Thunderbird +1) - [CVE-2022-45406](https://cve.now/CVE-2022-45406.md): If an out-of-memory condition occurred when creating a JavaScript global, a JavaScript realm may be deleted while references to it lived on (CVSS 9.8, Mozilla Firefox ESR · Mozilla Thunderbird +1) - [CVE-2022-45407](https://cve.now/CVE-2022-45407.md): If an attacker loaded a font using \FontFace()\ on a background worker, a use-after-free could have occurred, leading to a potent (CVSS 7.5, Mozilla Firefox) - [CVE-2022-45408](https://cve.now/CVE-2022-45408.md): Through a series of popups that reuse windowName, an attacker can cause a window to go fullscreen without the user seeing the notification p (CVSS 6.5, Mozilla Firefox ESR · Mozilla Thunderbird +1) - [CVE-2022-45409](https://cve.now/CVE-2022-45409.md): The garbage collector could have been aborted in several states and zones and \GCRuntime::finishCollection\ may not have been cal (CVSS 8.8, Mozilla Firefox ESR · Mozilla Thunderbird +1) - [CVE-2022-45410](https://cve.now/CVE-2022-45410.md): When a ServiceWorker intercepted a request with \FetchEvent\, the origin of the request was lost after the ServiceWorker took own (CVSS 6.5, Mozilla Firefox ESR · Mozilla Thunderbird +1) - [CVE-2022-45411](https://cve.now/CVE-2022-45411.md): Cross-Site Tracing occurs when a server will echo a request back via the Trace method, allowing an XSS attack to access to authorization hea (CVSS 6.1, Mozilla Firefox ESR · Mozilla Thunderbird +1) - [CVE-2022-45412](https://cve.now/CVE-2022-45412.md): When resolving a symlink such as \file:///proc/self/fd/1\, an error message may be produced where the symlink was resolved to a s (CVSS 8.8, Mozilla Firefox ESR · Mozilla Thunderbird +1) - [CVE-2022-45413](https://cve.now/CVE-2022-45413.md): Using the \S.browser\_fallback\_url parameter\ parameter, an attacker could redirect a user to a URL and cause SameSite=Strict cook (CVSS 6.1, Mozilla Firefox) - [CVE-2022-45414](https://cve.now/CVE-2022-45414.md): If a Thunderbird user quoted from an HTML email, for example by replying to the email, and the email contained either a VIDEO tag with the P (CVSS 8.1, Mozilla Thunderbird) - [CVE-2022-45415](https://cve.now/CVE-2022-45415.md): When downloading an HTML file, if the title of the page was formatted as a filename with a malicious extension, Firefox may have saved the f (CVSS 7.8, Mozilla Firefox) - [CVE-2022-45416](https://cve.now/CVE-2022-45416.md): Keyboard events reference strings like "KeyA" that were at fixed, known, and widely-spread addresses. (CVSS 6.5, Mozilla Firefox ESR · Mozilla Thunderbird +1) - [CVE-2022-45417](https://cve.now/CVE-2022-45417.md): Service Workers did not detect Private Browsing Mode correctly in all cases, which could have led to Service Workers being written to disk f (CVSS 4.3, Mozilla Firefox) - [CVE-2022-45418](https://cve.now/CVE-2022-45418.md): If a custom mouse cursor is specified in CSS, under certain circumstances the cursor could have been drawn over the browser UI, resulting in (CVSS 6.1, Mozilla Firefox ESR · Mozilla Thunderbird +1) - [CVE-2022-45419](https://cve.now/CVE-2022-45419.md): If the user added a security exception for an invalid TLS certificate, opened an ongoing TLS connection with a server that used that certifi (CVSS 6.5, Mozilla Firefox) - [CVE-2022-45420](https://cve.now/CVE-2022-45420.md): Use tables inside of an iframe, an attacker could have caused iframe contents to be rendered outside the boundaries of the iframe, resulting (CVSS 6.5, Mozilla Firefox ESR · Mozilla Thunderbird +1) - [CVE-2022-45421](https://cve.now/CVE-2022-45421.md): Mozilla developers Andrew McCreight and Gabriele Svelto reported memory safety bugs present in Thunderbird 102.4. (CVSS 8.8, Mozilla Firefox ESR · Mozilla Thunderbird +1) - [CVE-2022-45966](https://cve.now/CVE-2022-45966.md): here is an arbitrary file upload vulnerability in the file management function module of Classcms3.5. (CVSS 9.8) - [CVE-2022-46101](https://cve.now/CVE-2022-46101.md): AyaCMS v3.1.2 was found to have a code flaw in the ust\_sql.inc.php file, which allows attackers to cause command execution by inserting mali (CVSS 8.8) - [CVE-2022-46102](https://cve.now/CVE-2022-46102.md): AyaCMS 3.1.2 is vulnerable to Arbitrary file upload via /aya/module/admin/fst\_down.inc.php (CVSS 9.8) - [CVE-2022-4644](https://cve.now/CVE-2022-4644.md): Open Redirect in ikus060/rdiffweb (CVSS 5.9, ikus060/rdiffweb · rdiffweb) - [CVE-2022-4646](https://cve.now/CVE-2022-4646.md): Cross-Site Request Forgery (CSRF) in ikus060/rdiffweb (CVSS 5.3, ikus060/rdiffweb · rdiffweb) - [CVE-2022-4647](https://cve.now/CVE-2022-4647.md): Cross-site Scripting (XSS) - Stored in microweber/microweber (CVSS 5.1, microweber/microweber) - [CVE-2022-46491](https://cve.now/CVE-2022-46491.md): A Cross-Site Request Forgery (CSRF) vulnerability in the Add Administrator function of the default version of nbnbk allows attackers to arbi (CVSS 6.5) - [CVE-2022-46493](https://cve.now/CVE-2022-46493.md): Default version of nbnbk was discovered to contain an arbitrary file upload vulnerability via the component /api/User/download\_img. (CVSS 9.8) - [CVE-2022-4662](https://cve.now/CVE-2022-4662.md): A flaw incorrect access control in the Linux kernel USB core subsystem was found in the way user attaches usb device. (CVSS 5.5, Kernel) - [CVE-2022-46871](https://cve.now/CVE-2022-46871.md): An out of date library (libusrsctp) contained vulnerabilities that could potentially be exploited. (CVSS 8.8, Mozilla Firefox) - [CVE-2022-46872](https://cve.now/CVE-2022-46872.md): An attacker who compromised a content process could have partially escaped the sandbox to read arbitrary files via clipboard-related IPC mes (CVSS 8.6, Mozilla Firefox · Mozilla Thunderbird) - [CVE-2022-46873](https://cve.now/CVE-2022-46873.md): Because Firefox did not implement the \unsafe-hashes\ CSP directive, an attacker who was able to inject markup into a page otherw (CVSS 8.8, Mozilla Firefox) - [CVE-2022-46874](https://cve.now/CVE-2022-46874.md): A file with a long filename could have had its filename truncated to remove the valid extension, leaving a malicious extension in its place. (CVSS 8.8, Mozilla Firefox · Mozilla Thunderbird) - [CVE-2022-46875](https://cve.now/CVE-2022-46875.md): The executable file warning was not presented when downloading .atloc and .ftploc files, which can run commands on a user's computer. (CVSS 6.5, Mozilla Firefox · Mozilla Thunderbird) - [CVE-2022-46877](https://cve.now/CVE-2022-46877.md): By confusing the browser, the fullscreen notification could have been delayed or suppressed, resulting in potential user confusion or spoofi (CVSS 4.3, Mozilla Firefox) - [CVE-2022-46878](https://cve.now/CVE-2022-46878.md): Mozilla developers Randell Jesup, Valentin Gosu, Olli Pettay, and the Mozilla Fuzzing Team reported memory safety bugs present in Thunderbir (CVSS 8.8, Mozilla Firefox · Mozilla Thunderbird) - [CVE-2022-46879](https://cve.now/CVE-2022-46879.md): Mozilla developers and community members Lukas Bernhard, Gabriele Svelto, Randell Jesup, and the Mozilla Fuzzing Team reported memory safety (CVSS 8.8, Mozilla Firefox) - [CVE-2022-46880](https://cve.now/CVE-2022-46880.md): A missing check related to tex units could have led to a use-after-free and potentially exploitable crash.\
\*Note\*: This advisory was ad (CVSS 6.5, Mozilla Firefox ESR · Mozilla Firefox +1) - [CVE-2022-46881](https://cve.now/CVE-2022-46881.md): An optimization in WebGL was incorrect in some cases, and could have led to memory corruption and a potentially exploitable crash. (CVSS 8.8, Mozilla Firefox · Mozilla Thunderbird) - [CVE-2022-46882](https://cve.now/CVE-2022-46882.md): A use-after-free in WebGL extensions could have led to a potentially exploitable crash. (CVSS 9.8, Mozilla Firefox · Mozilla Thunderbird) - [CVE-2022-46883](https://cve.now/CVE-2022-46883.md): Mozilla developers Gabriele Svelto, Yulia Startsev, Andrew McCreight and the Mozilla Fuzzing Team reported memory safety bugs present in Fir (CVSS 8.8, Mozilla Firefox) - [CVE-2022-46885](https://cve.now/CVE-2022-46885.md): Mozilla developers Timothy Nikkel, Ashley Hale, and the Mozilla Fuzzing Team reported memory safety bugs present in Firefox 105. (CVSS 8.8, Mozilla Firefox) - [CVE-2022-47926](https://cve.now/CVE-2022-47926.md): AyaCMS 3.1.2 is vulnerable to file deletion via /aya/module/admin/fst\_del.inc.php (CVSS 9.8) - [CVE-2022-47928](https://cve.now/CVE-2022-47928.md): In MISP before 2.4.167, there is XSS in the template file uploads in app/View/Templates/upload\_file.ctp. (no CVSS) - [CVE-2022-47931](https://cve.now/CVE-2022-47931.md): IO FinNet tss-lib before 2.0.0 allows a collision of hash values. (CVSS 6.5, github.com/bnb-chain/tss-lib · github.com/binance-chain/tss…) --- Source: cve.now, built and run by Sazabi (AI-native observability and security) Page: https://cve.now/daily/2022-12-22 Site guide for agents: https://cve.now/llms.txt Uses NVD data; not endorsed by NVD.