Lucene search
Redhat.comRH:CVE-2022-28285HistoryApr 06, 2022 - 2:50 p.m.
CVE-2022-28285
2022-04-0614:50:42
redhat.com
access.redhat.com
17
mozilla
assembly code
out-of-bounds
memory read
vulnerability
CVSS3
6.5
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
EPSS
0.001
Percentile
50.2%
A flaw was found in Mozilla. The Mozilla Foundation Security Advisory describes this flaw as: When generating the assembly code for MLoadTypedArrayElementHole, an incorrect AliasSet was used. In conjunction with another vulnerability, this could have been used for an out-of-bounds memory read.
Related
ubuntucve
ubuntucve
CVE-2022-28285
2022-04-06 00:00:00
cvelist
cvelist
CVE-2022-28285
2022-12-22 00:00:00
cve
cve
CVE-2022-28285
2022-12-22 20:15:24
veracode
veracode
Out-of-bounds Read
2022-04-09 22:44:06
debiancve
debiancve
CVE-2022-28285
2022-12-22 20:15:24
prion
prion
Design/Logic Flaw
2022-12-22 20:15:00
alpinelinux
alpinelinux
CVE-2022-28285
2022-12-22 20:15:24
cnvd
cnvd
Mozilla Firefox Resource Management Error Vulnerability (CNVD-2023-17321)
2023-01-04 00:00:00
nvd
nvd
CVE-2022-28285
2022-12-22 20:15:24
osv
osv
mozjs91 vulnerabilities
2022-06-27 12:39:46
thunderbird vulnerabilities
2022-04-27 19:44:24
Important: firefox security update
2022-04-08 13:40:04
ubuntu
ubuntu
SpiderMonkey JavaScript Library vulnerabilities
2022-06-27 00:00:00
Thunderbird vulnerabilities
2022-04-27 00:00:00
Firefox vulnerabilities
2022-04-07 00:00:00
openvas
openvas
Ubuntu: Security Advisory (USN-5494-1)
2022-06-28 00:00:00
Slackware: Security Advisory (SSA:2022-095-01)
2022-04-21 00:00:00
openSUSE: Security Advisory for MozillaFirefox (openSUSE-SU-2022:1127-1)
2022-04-08 00:00:00
nessus
nessus
Slackware Linux 15.0 / current mozilla-firefox Multiple Vulnerabilities (SSA:2022-095-01)
2022-04-05 00:00:00
RHEL 8 : firefox (RHSA-2022:1287)
2022-04-09 00:00:00
slackware
slackware
[slackware-security] mozilla-firefox
2022-04-05 19:19:02
[slackware-security] mozilla-thunderbird
2022-04-06 20:29:58
redhat
redhat
(RHSA-2022:1287) Important: firefox security update
2022-04-08 13:40:04
(RHSA-2022:1283) Important: firefox security update
2022-04-08 13:30:19
(RHSA-2022:1286) Important: firefox security update
2022-04-08 13:39:06
redos
redos
ROS-20220412-02
2022-04-12 00:00:00
ROS-20220412-03
2022-04-12 00:00:00
kaspersky
kaspersky
KLA12497 Multiple vulnerabilities in Mozilla Firefox ESR
2022-04-05 00:00:00
KLA12498 Multiple vulnerabilities in Mozilla Thunderbird
2022-03-07 00:00:00
KLA12496 Multiple vulnerabilities in Mozilla Firefox
2022-04-05 00:00:00
debian
debian
[SECURITY] [DSA 5113-1] firefox-esr security update
2022-04-06 17:11:21
[SECURITY] [DLA 2971-1] firefox-esr security update
2022-04-07 08:43:52
[SECURITY] [DSA 5118-1] thunderbird security update
2022-04-10 18:10:05
suse
suse
Security update for MozillaFirefox (important)
2022-04-07 00:00:00
Security update for MozillaThunderbird (important)
2022-04-13 00:00:00
oraclelinux
oraclelinux
firefox security update
2022-04-08 00:00:00
firefox security update
2022-04-08 00:00:00
thunderbird security update
2022-04-12 00:00:00
altlinux
altlinux
Security fix for the ALT Linux 10 package firefox-esr version 91.8.0-alt1
2022-04-06 00:00:00
Security fix for the ALT Linux 10 package thunderbird version 91.8.0-alt1
2022-04-06 00:00:00
almalinux
almalinux
Important: firefox security update
2022-04-08 13:40:04
Important: thunderbird security update
2022-04-11 13:29:58
rocky
rocky
firefox security update
2022-04-08 13:40:04
thunderbird security update
2022-04-11 13:29:58
mozilla
mozilla
Security Vulnerabilities fixed in Firefox ESR 91.8 — Mozilla
2022-04-05 00:00:00
Security Vulnerabilities fixed in Thunderbird 91.8 — Mozilla
2022-04-05 00:00:00
Security Vulnerabilities fixed in Firefox 99 — Mozilla
2022-04-05 00:00:00
amazon
amazon
Important: thunderbird
2022-04-25 23:45:00
mageia
mageia
Updated firefox/nss/rootcerts packages fix security vulnerability
2022-04-29 01:46:19
Updated thunderbird packages fix security vulnerabilities
2022-04-29 01:46:19
ibm
ibm
gentoo
gentoo
Mozilla Firefox: Multiple Vulnerabilities
2022-08-10 00:00:00
Mozilla Thunderbird: Multiple Vulnerabilities
2022-08-10 00:00:00
CVSS3
6.5
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
EPSS
0.001
Percentile
50.2%
Related for RH:CVE-2022-28285