CVE-2022-38474

2022-12-2200:00:00

mozilla

www.cve.org

website

audio

notification

firefox

android

vulnerability

5.8 Medium

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

30.7%

JSON

A website that had permission to access the microphone could record audio without the audio notification being shown. This bug does not allow the attacker to bypass the permission prompt - it only affects the notification shown once permission has been granted.<br />This bug only affects Firefox for Android. Other operating systems are unaffected.. This vulnerability affects Firefox < 104.

CNA Affected

[
  {
    "vendor": "Mozilla",
    "product": "Firefox",
    "versions": [
      {
        "version": "unspecified",
        "lessThan": "104",
        "status": "affected",
        "versionType": "custom"
      }
    ]
  }
]