Vulnerabilities > Mozilla
| DATE | CVE | VULNERABILITY TITLE | RISK |
|---|---|---|---|
| 2022-12-22 | CVE-2022-28287 | Unspecified vulnerability in Mozilla Firefox In unusual circumstances, selecting text could cause text selection caching to behave incorrectly, leading to a crash. | 6.5 |
| 2022-12-22 | CVE-2022-28288 | Out-of-bounds Write vulnerability in Mozilla Firefox Mozilla developers and community members Randell Jesup, Sebastian Hengst, and the Mozilla Fuzzing Team reported memory safety bugs present in Firefox 98. | 8.8 |
| 2022-12-22 | CVE-2022-28289 | Out-of-bounds Write vulnerability in Mozilla Firefox ESR Mozilla developers and community members Nika Layzell, Andrew McCreight, Gabriele Svelto, and the Mozilla Fuzzing Team reported memory safety bugs present in Thunderbird 91.7. | 8.8 |
| 2022-12-22 | CVE-2022-29909 | Incorrect Default Permissions vulnerability in Mozilla Thunderbird Documents in deeply-nested cross-origin browsing contexts could have obtained permissions granted to the top-level origin, bypassing the existing prompt and wrongfully inheriting the top-level permissions. | 8.8 |
| 2022-12-22 | CVE-2022-29910 | Open Redirect vulnerability in Mozilla Firefox When closed or sent to the background, Firefox for Android would not properly record and persist HSTS settings.<br>*Note: This issue only affected Firefox for Android. | 6.1 |
| 2022-12-22 | CVE-2022-29911 | Improper Restriction of Rendered UI Layers or Frames vulnerability in Mozilla Thunderbird An improper implementation of the new iframe sandbox keyword <code>allow-top-navigation-by-user-activation</code> could lead to script execution without <code>allow-scripts</code> being present. | 6.1 |
| 2022-12-22 | CVE-2022-29912 | Open Redirect vulnerability in Mozilla Thunderbird Requests initiated through reader mode did not properly omit cookies with a SameSite attribute. | 6.1 |
| 2022-12-22 | CVE-2022-29913 | Unspecified vulnerability in Mozilla Thunderbird The parent process would not properly check whether the Speech Synthesis feature is enabled, when receiving instructions from a child process. | 6.5 |
| 2022-12-22 | CVE-2022-29914 | Unspecified vulnerability in Mozilla Thunderbird When reusing existing popups Firefox would have allowed them to cover the fullscreen notification UI, which could have enabled browser spoofing attacks. | 6.5 |
| 2022-12-22 | CVE-2022-29915 | Unspecified vulnerability in Mozilla Firefox The Performance API did not properly hide the fact whether a request cross-origin resource has observed redirects. | 4.3 |