DeutschShown in its original language — a full translation is planned for a future version.
Mozilla Firefox und Mozilla Firefox ESR: Mehrere Schwachstellen
view advisory published 2022-07-26
Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Mozilla Firefox und Mozilla Firefox ESR ausnutzen, um beliebigen Programmcode auszuführen, Sicherheitsmaßnahmen zu umgehen, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand zu verursachen, einen Cross-Site-Scripting-Angriff durchzuführen und Informationen falsch darzustellen.
01
describes (8)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2022-36320US | critical9.8 | — | ||
Mozilla developers and the Mozilla Fuzzing Team reported memory safety bugs present in Firefox 102. Some of these bugs showed evidence of memory corruption and we presume that with… | ||||
| CVE-2022-36319US | high7.5 | — | ||
When combining CSS properties for overflow and transform, the mouse cursor could interact with different coordinates than displayed. This vulnerability affects Firefox ESR < 102.1,… | ||||
| CVE-2022-36318US | medium5.3 | — | ||
When visiting directory listings for `chrome://` URLs as source text, some parameters were reflected. This vulnerability affects Firefox ESR < 102.1, Firefox ESR < 91.12, Firefox <… | ||||
| CVE-2022-36317US | medium6.5 | — | ||
When visiting a website with an overly long URL, the user interface would start to hang. Due to session restore, this could lead to a permanent Denial of Service.<br>*This bug only… | ||||
| CVE-2022-36316US | medium6.1 | — | ||
When using the Performance API, an attacker was able to notice subtle differences between PerformanceEntries and thus learn whether the target URL had been subject to a redirect. T… | ||||
| CVE-2022-36315US | medium4.3OT elevated | — | ||
When loading a script with Subresource Integrity, attackers with an injection capability could trigger the reuse of previously cached entries with incorrect, different integrity me… | ||||
| CVE-2022-36314US | medium5.5 | — | ||
When opening a Windows shortcut from the local filesystem, an attacker could supply a remote path that would lead to unexpected network requests from the operating system.<br>This… | ||||
| CVE-2022-2505US | high8.8 | — | ||
Mozilla developers and the Mozilla Fuzzing Team reported memory safety bugs present in Firefox 102. Some of these bugs showed evidence of memory corruption and we presume that with… | ||||
02
references
External citations — patches, advisories, analysis.
- Oracle Linux Security Advisory ELSA-2022-5767 vom 2022-08-02external
- Oracle Linux Security Advisory ELSA-2022-5776 vom 2022-08-02external
- Oracle Linux Security Advisory ELSA-2022-5777 vom 2022-08-03external
- Red Hat Security Advisory RHSA-2022:5765 vom 2022-08-01external
- Red Hat Security Advisory RHSA-2022:5766 vom 2022-08-01external
- Red Hat Security Advisory RHSA-2022:5767 vom 2022-08-01external
- Red Hat Security Advisory RHSA-2022:5769 vom 2022-08-01external
- Red Hat Security Advisory RHSA-2022:5776 vom 2022-08-01external
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan