9.8 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
8.5 High
AI Score
Confidence
Low
0.004 Low
EPSS
Percentile
73.1%
Multiple security issues were discovered in Firefox. If a user were
tricked into opening a specially crafted website, an attacker could
potentially exploit these to cause a denial of service, spoof the
browser UI, bypass CSP restrictions, bypass sandboxed iframe restrictions,
obtain sensitive information, bypass the HTML sanitizer, or execute
arbitrary code. (CVE-2022-2200, CVE-2022-34468, CVE-2022-34470,
CVE-2022-34473, CVE-2022-34474, CVE-2022-34475, CVE-2022-34476,
CVE-2022-34477, CVE-2022-34479, CVE-2022-34480, CVE-2022-34481,
CVE-2022-34484, CVE-2022-34485)
It was discovered that Firefox could be made to save an image with an
executable extension in the filename when dragging and dropping an image
in some circumstances. If a user were tricked into dragging and dropping
a specially crafted image, an attacker could potentially exploit this to
trick the user into executing arbitrary code. (CVE-2022-34482,
CVE-2022-34483)
It was discovered that a compromised server could trick Firefox into an
addon downgrade in some circumstances. An attacker could potentially
exploit this to trick the browser into downgrading an addon to a prior
version. (CVE-2022-34471)
It was discovered that an unavailable PAC file caused OCSP requests to
be blocked, resulting in incorrect error pages being displayed.
(CVE-2022-34472)
OS | Version | Architecture | Package | Version | Filename |
---|---|---|---|---|---|
Ubuntu | 21.10 | noarch | firefox | < 102.0+build2-0ubuntu0.21.10.1 | UNKNOWN |
Ubuntu | 21.10 | noarch | firefox-dbg | < 102.0+build2-0ubuntu0.21.10.1 | UNKNOWN |
Ubuntu | 21.10 | noarch | firefox-dev | < 102.0+build2-0ubuntu0.21.10.1 | UNKNOWN |
Ubuntu | 21.10 | noarch | firefox-geckodriver | < 102.0+build2-0ubuntu0.21.10.1 | UNKNOWN |
Ubuntu | 21.10 | noarch | firefox-locale-af | < 102.0+build2-0ubuntu0.21.10.1 | UNKNOWN |
Ubuntu | 21.10 | noarch | firefox-locale-an | < 102.0+build2-0ubuntu0.21.10.1 | UNKNOWN |
Ubuntu | 21.10 | noarch | firefox-locale-ar | < 102.0+build2-0ubuntu0.21.10.1 | UNKNOWN |
Ubuntu | 21.10 | noarch | firefox-locale-as | < 102.0+build2-0ubuntu0.21.10.1 | UNKNOWN |
Ubuntu | 21.10 | noarch | firefox-locale-ast | < 102.0+build2-0ubuntu0.21.10.1 | UNKNOWN |
Ubuntu | 21.10 | noarch | firefox-locale-az | < 102.0+build2-0ubuntu0.21.10.1 | UNKNOWN |
ubuntu.com/security/CVE-2022-2200
ubuntu.com/security/CVE-2022-34468
ubuntu.com/security/CVE-2022-34470
ubuntu.com/security/CVE-2022-34471
ubuntu.com/security/CVE-2022-34472
ubuntu.com/security/CVE-2022-34473
ubuntu.com/security/CVE-2022-34474
ubuntu.com/security/CVE-2022-34475
ubuntu.com/security/CVE-2022-34476
ubuntu.com/security/CVE-2022-34477
ubuntu.com/security/CVE-2022-34479
ubuntu.com/security/CVE-2022-34480
ubuntu.com/security/CVE-2022-34481
ubuntu.com/security/CVE-2022-34482
ubuntu.com/security/CVE-2022-34483
ubuntu.com/security/CVE-2022-34484
ubuntu.com/security/CVE-2022-34485
9.8 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
8.5 High
AI Score
Confidence
Low
0.004 Low
EPSS
Percentile
73.1%