Lucene search
HistoryDec 22, 2022 - 8:15 p.m.
CVE-2022-22742
vulnerability
firefox
thunderbird
memory access
exploit
crash
cve-2022-22742
6.5 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
0.001 Low
EPSS
Percentile
43.9%
When inserting text while in edit mode, some characters might have lead to out-of-bounds memory access causing a potentially exploitable crash. This vulnerability affects Firefox ESR < 91.5, Firefox < 96, and Thunderbird < 91.5.
Affected configurations
Node
mozillafirefoxRange<96.0
ORmozillafirefox_esrRange<91.5
ORmozillathunderbirdRange<91.5
Related
cve
cve
CVE-2022-22742
2022-12-22 20:15:14
veracode
veracode
Out-of-bounds Memory Access When Inserting Text In Edit Mode
2022-01-14 05:54:51
prion
prion
Design/Logic Flaw
2022-12-22 20:15:00
redhatcve
redhatcve
CVE-2022-22742
2022-01-12 23:23:36
cvelist
cvelist
CVE-2022-22742
2022-12-22 00:00:00
debiancve
debiancve
CVE-2022-22742
2022-12-22 20:15:14
alpinelinux
alpinelinux
CVE-2022-22742
2022-12-22 20:15:14
ubuntucve
ubuntucve
CVE-2022-22742
2022-01-13 00:00:00
nessus
nessus
Scientific Linux Security Update : firefox on SL7.x i686/x86_64 (2022:0124)
2022-01-13 00:00:00
RHEL 8 : firefox (RHSA-2022:0126)
2022-01-13 00:00:00
RHEL 7 : thunderbird (RHSA-2022:0127)
2022-01-13 00:00:00
openvas
openvas
Mageia: Security Advisory (MGASA-2022-0013)
2022-01-28 00:00:00
CentOS: Security Advisory for firefox (CESA-2022:0124)
2022-01-19 00:00:00
redhat
redhat
(RHSA-2022:0124) Important: firefox security update
2022-01-12 11:24:47
(RHSA-2022:0131) Important: thunderbird security update
2022-01-12 11:30:34
(RHSA-2022:0128) Important: thunderbird security update
2022-01-12 11:29:20
osv
osv
firefox-esr - security update
2022-01-13 00:00:00
Important: firefox security update
2022-01-12 11:30:14
Important: thunderbird security update
2022-01-12 11:29:46
debian
debian
[SECURITY] [DSA 5044-1] firefox-esr security update
2022-01-13 18:47:15
[SECURITY] [DLA 2881-1] thunderbird security update
2022-01-16 10:56:46
[SECURITY] [DSA 5045-1] thunderbird security update
2022-01-14 18:25:24
centos
centos
thunderbird security update
2022-01-18 13:44:49
firefox security update
2022-01-18 13:44:03
oraclelinux
oraclelinux
firefox security update
2022-01-13 00:00:00
firefox security update
2022-01-12 00:00:00
thunderbird security update
2022-01-13 00:00:00
almalinux
almalinux
Important: thunderbird security update
2022-01-12 11:29:46
Important: firefox security update
2022-01-12 11:30:14
mageia
mageia
Updated nss and firefox packages fix security vulnerabilities
2022-01-12 02:22:28
Updated thunderbird packages fix security vulnerability
2022-01-16 23:39:09
rocky
rocky
thunderbird security update
2022-01-12 11:29:46
firefox security update
2022-01-12 11:30:14
redos
redos
ROS-20220114-01
2022-01-14 00:00:00
kaspersky
kaspersky
KLA12416 Multiple vulnerabilities in Mozilla Firefox ESR
2022-01-11 00:00:00
KLA12417 Multiple vulnerabilities in Mozilla Thunderbird
2022-01-11 00:00:00
KLA12415 Multiple vulnerabilities in Mozilla Firefox
2022-01-11 00:00:00
altlinux
altlinux
Security fix for the ALT Linux 10 package thunderbird version 91.5.0-alt1
2022-01-20 00:00:00
Security fix for the ALT Linux 10 package firefox-esr version 91.5.0-alt1
2022-01-19 00:00:00
mozilla
mozilla
Security Vulnerabilities fixed in Firefox ESR 91.5 — Mozilla
2022-01-11 00:00:00
Security Vulnerabilities fixed in Thunderbird 91.5 — Mozilla
2022-01-11 00:00:00
Security Vulnerabilities fixed in Firefox 96 — Mozilla
2022-01-11 00:00:00
suse
suse
Security update for MozillaFirefox (moderate)
2022-05-18 00:00:00
Security update for MozillaThunderbird (important)
2022-01-26 00:00:00
ubuntu
ubuntu
Firefox vulnerabilities
2022-01-13 00:00:00
Thunderbird vulnerabilities
2022-01-21 00:00:00
Thunderbird vulnerabilities
2022-01-21 00:00:00
hivepro
hivepro
Mozilla Firefox patches multiple vulnerabilities
2022-01-12 07:57:08
amazon
amazon
Important: thunderbird
2022-03-07 23:34:00
Important: thunderbird
2022-07-06 03:17:00
ibm
ibm
gentoo
gentoo
Mozilla Firefox: Multiple vulnerabilities
2022-02-21 00:00:00
Mozilla Thunderbird: Multiple Vulnerabilities
2022-08-10 00:00:00
6.5 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
0.001 Low
EPSS
Percentile
43.9%
Related for NVD:CVE-2022-22742