Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2022-22738 State: PUBLISHED Published: 2022-12-22T00:00:00.000Z Last Updated: 2025-04-16T15:07:37.113Z Vendors: Mozilla Products: Firefox ESR, Firefox, Thunderbird Problem Types: Heap-buffer-overflow in blendGaussianBlur Description: Applying a CSS filter effect could have accessed out of bounds memory. This could have lead to a heap-buffer-overflow causing a potentially exploitable crash. This vulnerability affects Firefox ESR < 91.5, Firefox < 96, and Thunderbird < 91.5. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.mozilla.org/security/advisories/mfsa2022-01/ - https://www.mozilla.org/security/advisories/mfsa2022-02/ - ht
https://www.mozilla.org/security/advisories/mfsa2022-01/ - https://www.mozilla.org/security/advisories/mfsa2022-02/ - https://www.mozilla.org/security/advisories/mfsa2022-03/ - https://bugzilla.mozilla.org/show_bug.cgi?id=1742382
CVE ID: CVE-2022-22739 State: PUBLISHED Published: 2022-12-22T00:00:00.000Z Last Updated: 2025-04-16T15:47:41.548Z Vendors: Mozilla Products: Firefox ESR, Firefox, Thunderbird Problem Types: Missing throttling on external protocol launch dialog Description: Malicious websites could have tricked users into accepting launching a program to handle an external URL protocol. This vulnerability affects Firefox ESR < 91.5, Firefox < 96, and Thunderbird < 91.5. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.mozilla.org/security/advisories/mfsa2022-01/ - https://www.mozilla.org/security/advisories/mfsa2022-02/ - https://www.mozilla.org/security/a
/advisories/mfsa2022-01/ - https://www.mozilla.org/security/advisories/mfsa2022-02/ - https://www.mozilla.org/security/advisories/mfsa2022-03/ - https://bugzilla.mozilla.org/show_bug.cgi?id=1744158
CVE ID: CVE-2022-22740 State: PUBLISHED Published: 2022-12-22T00:00:00.000Z Last Updated: 2025-04-16T15:48:02.732Z Vendors: Mozilla Products: Firefox ESR, Firefox, Thunderbird Problem Types: Use-after-free of ChannelEventQueue::mOwner Description: Certain network request objects were freed too early when releasing a network request handle. This could have lead to a use-after-free causing a potentially exploitable crash. This vulnerability affects Firefox ESR < 91.5, Firefox < 96, and Thunderbird < 91.5. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.mozilla.org/security/advisories/mfsa2022-01/ - https://www.mozilla.org/security/advisorie
ent: References: - https://www.mozilla.org/security/advisories/mfsa2022-01/ - https://www.mozilla.org/security/advisories/mfsa2022-02/ - https://www.mozilla.org/security/advisories/mfsa2022-03/ - https://bugzilla.mozilla.org/show_bug.cgi?id=1742334
CVE ID: CVE-2022-22741 State: PUBLISHED Published: 2022-12-22T00:00:00.000Z Last Updated: 2025-04-16T15:48:23.889Z Vendors: Mozilla Products: Firefox ESR, Firefox, Thunderbird Problem Types: Browser window spoof using fullscreen mode Description: When resizing a popup while requesting fullscreen access, the popup would have become unable to leave fullscreen mode. This vulnerability affects Firefox ESR < 91.5, Firefox < 96, and Thunderbird < 91.5. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.mozilla.org/security/advisories/mfsa2022-01/ - https://www.mozilla.org/security/advisories/mfsa2022-02/ - https://www.mozilla.org/security/advisori
ries/mfsa2022-01/ - https://www.mozilla.org/security/advisories/mfsa2022-02/ - https://www.mozilla.org/security/advisories/mfsa2022-03/ - https://bugzilla.mozilla.org/show_bug.cgi?id=1740389
CVE ID: CVE-2022-22742 State: PUBLISHED Published: 2022-12-22T00:00:00.000Z Last Updated: 2025-04-16T15:48:50.561Z Vendors: Mozilla Products: Firefox ESR, Firefox, Thunderbird Problem Types: Out-of-bounds memory access when inserting text in edit mode Description: When inserting text while in edit mode, some characters might have lead to out-of-bounds memory access causing a potentially exploitable crash. This vulnerability affects Firefox ESR < 91.5, Firefox < 96, and Thunderbird < 91.5. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.mozilla.org/security/advisories/mfsa2022-01/ - https://www.mozilla.org/security/advisories/mfsa2022-02/
: - https://www.mozilla.org/security/advisories/mfsa2022-01/ - https://www.mozilla.org/security/advisories/mfsa2022-02/ - https://www.mozilla.org/security/advisories/mfsa2022-03/ - https://bugzilla.mozilla.org/show_bug.cgi?id=1739923
CVE ID: CVE-2022-22743 State: PUBLISHED Published: 2022-12-22T00:00:00.000Z Last Updated: 2025-04-16T15:49:17.809Z Vendors: Mozilla Products: Firefox ESR, Firefox, Thunderbird Problem Types: Browser window spoof using fullscreen mode Description: When navigating from inside an iframe while requesting fullscreen access, an attacker-controlled tab could have made the browser unable to leave fullscreen mode. This vulnerability affects Firefox ESR < 91.5, Firefox < 96, and Thunderbird < 91.5. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.mozilla.org/security/advisories/mfsa2022-01/ - https://www.mozilla.org/security/advisories/mfsa2022-02/
: - https://www.mozilla.org/security/advisories/mfsa2022-01/ - https://www.mozilla.org/security/advisories/mfsa2022-02/ - https://www.mozilla.org/security/advisories/mfsa2022-03/ - https://bugzilla.mozilla.org/show_bug.cgi?id=1739220
CVE ID: CVE-2022-22744 State: PUBLISHED Published: 2022-12-22T00:00:00.000Z Last Updated: 2025-04-16T15:49:43.573Z Vendors: Mozilla Products: Firefox ESR, Firefox, Thunderbird Problem Types: The 'Copy as curl' feature in DevTools did not fully escape website-controlled data, potentially leading to command injection Description: The constructed curl command from the "Copy as curl" feature in DevTools was not properly escaped for PowerShell. This could have lead to command injection if pasted into a Powershell prompt.<br>*This bug only affects Thunderbird for Windows. Other operating systems are unaffected.*. This vulnerability affects Firefox ESR < 91.5, Firefox < 96, and Thunderbird < 91.5.
perating systems are unaffected.*. This vulnerability affects Firefox ESR < 91.5, Firefox < 96, and Thunderbird < 91.5. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.mozilla.org/security/advisories/mfsa2022-01/ - https://www.mozilla.org/security/advisories/mfsa2022-02/ - https://www.mozilla.org/security/advisories/mfsa2022-03/ - https://bugzilla.mozilla.org/show_bug.cgi?id=1737252
CVE ID: CVE-2022-22745 State: PUBLISHED Published: 2022-12-22T00:00:00.000Z Last Updated: 2025-04-16T15:04:12.781Z Vendors: Mozilla Products: Firefox ESR, Firefox, Thunderbird Problem Types: Leaking cross-origin URLs through securitypolicyviolation event Description: Securitypolicyviolation events could have leaked cross-origin information for frame-ancestors violations. This vulnerability affects Firefox ESR < 91.5, Firefox < 96, and Thunderbird < 91.5. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.mozilla.org/security/advisories/mfsa2022-01/ - https://www.mozilla.org/security/advisories/mfsa2022-02/ - https://www.mozilla.org/security/
y/advisories/mfsa2022-01/ - https://www.mozilla.org/security/advisories/mfsa2022-02/ - https://www.mozilla.org/security/advisories/mfsa2022-03/ - https://bugzilla.mozilla.org/show_bug.cgi?id=1735856
CVE ID: CVE-2022-22746 State: PUBLISHED Published: 2022-12-22T00:00:00.000Z Last Updated: 2025-04-16T15:01:18.742Z Vendors: Mozilla Products: Firefox ESR, Firefox, Thunderbird Problem Types: Calling into reportValidity could have lead to fullscreen window spoof Description: A race condition could have allowed bypassing the fullscreen notification which could have lead to a fullscreen window spoof being unnoticed.<br>*This bug only affects Firefox for Windows. Other operating systems are unaffected.*. This vulnerability affects Firefox ESR < 91.5, Firefox < 96, and Thunderbird < 91.5. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.mozilla
rd < 91.5. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.mozilla.org/security/advisories/mfsa2022-01/ - https://www.mozilla.org/security/advisories/mfsa2022-02/ - https://www.mozilla.org/security/advisories/mfsa2022-03/ - https://bugzilla.mozilla.org/show_bug.cgi?id=1735071
CVE ID: CVE-2022-22747 State: PUBLISHED Published: 2022-12-22T00:00:00.000Z Last Updated: 2025-04-16T15:50:13.673Z Vendors: Mozilla Products: Firefox ESR, Firefox, Thunderbird Problem Types: Crash when handling empty pkcs7 sequence Description: After accepting an untrusted certificate, handling an empty pkcs7 sequence as part of the certificate data could have lead to a crash. This crash is believed to be unexploitable. This vulnerability affects Firefox ESR < 91.5, Firefox < 96, and Thunderbird < 91.5. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.mozilla.org/security/advisories/mfsa2022-01/ - https://www.mozilla.org/security/advisorie
ent: References: - https://www.mozilla.org/security/advisories/mfsa2022-01/ - https://www.mozilla.org/security/advisories/mfsa2022-02/ - https://www.mozilla.org/security/advisories/mfsa2022-03/ - https://bugzilla.mozilla.org/show_bug.cgi?id=1735028
CVE ID: CVE-2022-22748 State: PUBLISHED Published: 2022-12-22T00:00:00.000Z Last Updated: 2025-04-16T14:57:14.287Z Vendors: Mozilla Products: Firefox ESR, Firefox, Thunderbird Problem Types: Spoofed origin on external protocol launch dialog Description: Malicious websites could have confused Firefox into showing the wrong origin when asking to launch a program and handling an external URL protocol. This vulnerability affects Firefox ESR < 91.5, Firefox < 96, and Thunderbird < 91.5. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.mozilla.org/security/advisories/mfsa2022-01/ - https://www.mozilla.org/security/advisories/mfsa2022-02/ - https
ps://www.mozilla.org/security/advisories/mfsa2022-01/ - https://www.mozilla.org/security/advisories/mfsa2022-02/ - https://www.mozilla.org/security/advisories/mfsa2022-03/ - https://bugzilla.mozilla.org/show_bug.cgi?id=1705211
CVE ID: CVE-2022-22749 State: PUBLISHED Published: 2022-12-22T00:00:00.000Z Last Updated: 2025-04-16T14:53:27.499Z Vendors: Mozilla Products: Firefox Problem Types: Lack of URL restrictions when scanning QR codes Description: When scanning QR codes, Firefox for Android would have allowed navigation to some URLs that do not point to web content.<br>*This bug only affects Firefox for Android. Other operating systems are unaffected.*. This vulnerability affects Firefox < 96. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.mozilla.org/security/advisories/mfsa2022-01/ - https://bugzilla.mozilla.org/show_bug.cgi?id=1705094
CVE ID: CVE-2022-22750 State: PUBLISHED Published: 2022-12-22T00:00:00.000Z Last Updated: 2025-04-16T15:50:38.585Z Vendors: Mozilla Products: Firefox Problem Types: IPC passing of resource handles could have lead to sandbox bypass Description: By generally accepting and passing resource handles across processes, a compromised content process might have confused higher privileged processes to interact with handles that the unprivileged process should not have access to.<br>*This bug only affects Firefox for Windows and MacOS. Other operating systems are unaffected.*. This vulnerability affects Firefox < 96. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References
lnerability affects Firefox < 96. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.mozilla.org/security/advisories/mfsa2022-01/ - https://bugzilla.mozilla.org/show_bug.cgi?id=1566608
CVE ID: CVE-2022-22751 State: PUBLISHED Published: 2022-12-22T00:00:00.000Z Last Updated: 2025-04-16T14:50:18.670Z Vendors: Mozilla Products: Firefox ESR, Firefox, Thunderbird Problem Types: Memory safety bugs fixed in Thunderbird 91.5 Description: Mozilla developers Calixte Denizet, Kershaw Chang, Christian Holler, Jason Kratzer, Gabriele Svelto, Tyson Smith, Simon Giesecke, and Steve Fink reported memory safety bugs present in Firefox 95 and Firefox ESR 91.4. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Firefox ESR < 91.5, Firefox < 96, and Thunderbird
have been exploited to run arbitrary code. This vulnerability affects Firefox ESR < 91.5, Firefox < 96, and Thunderbird < 91.5. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.mozilla.org/security/advisories/mfsa2022-01/ - https://www.mozilla.org/security/advisories/mfsa2022-02/ - https://www.mozilla.org/security/advisories/mfsa2022-03/ - https://bugzilla.mozilla.org/buglist.cgi?bug_id=1664149%2C1737816%2C1739366%2C1740274%2C1740797%2C1741201%2C1741869%2C1743221%2C1743515%2C1745373%2C1746011
CVE ID: CVE-2022-22752 State: PUBLISHED Published: 2022-12-22T00:00:00.000Z Last Updated: 2025-04-18T14:16:08.261Z Vendors: Mozilla Products: Firefox Problem Types: Memory safety bugs fixed in Firefox 96 Description: Mozilla developers Christian Holler and Jason Kratzer reported memory safety bugs present in Firefox 95. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Firefox < 96. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.mozilla.org/security/advisories/mfsa2022-01/ - https://bugzilla.mozilla.org/b
DP Vulnrichment: References: - https://www.mozilla.org/security/advisories/mfsa2022-01/ - https://bugzilla.mozilla.org/buglist.cgi?bug_id=1741210%2C1742770
CVE ID: CVE-2022-22753 State: PUBLISHED Published: 2022-12-22T00:00:00.000Z Last Updated: 2025-04-16T14:48:11.579Z Vendors: Mozilla Products: Firefox, Thunderbird, Firefox ESR Problem Types: Privilege Escalation to SYSTEM on Windows via Maintenance Service Description: A Time-of-Check Time-of-Use bug existed in the Maintenance (Updater) Service that could be abused to grant Users write access to an arbitrary directory. This could have been used to escalate to SYSTEM access.<br>*This bug only affects Firefox on Windows. Other operating systems are unaffected.*. This vulnerability affects Firefox < 97, Thunderbird < 91.6, and Firefox ESR < 91.6. Additional Analyst Notes: - CVE Program Containe
ility affects Firefox < 97, Thunderbird < 91.6, and Firefox ESR < 91.6. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.mozilla.org/security/advisories/mfsa2022-05/ - https://www.mozilla.org/security/advisories/mfsa2022-04/ - https://www.mozilla.org/security/advisories/mfsa2022-06/ - https://bugzilla.mozilla.org/show_bug.cgi?id=1732435
CVE ID: CVE-2022-22754 State: PUBLISHED Published: 2022-12-22T00:00:00.000Z Last Updated: 2025-04-16T14:45:45.768Z Vendors: Mozilla Products: Firefox, Thunderbird, Firefox ESR Problem Types: Extensions could have bypassed permission confirmation during update Description: If a user installed an extension of a particular type, the extension could have auto-updated itself and while doing so, bypass the prompt which grants the new version the new requested permissions. This vulnerability affects Firefox < 97, Thunderbird < 91.6, and Firefox ESR < 91.6. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.mozilla.org/security/advisories/mfsa2022-0
: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.mozilla.org/security/advisories/mfsa2022-05/ - https://www.mozilla.org/security/advisories/mfsa2022-04/ - https://www.mozilla.org/security/advisories/mfsa2022-06/ - https://bugzilla.mozilla.org/show_bug.cgi?id=1750565
CVE ID: CVE-2022-22755 State: PUBLISHED Published: 2022-12-22T00:00:00.000Z Last Updated: 2025-04-16T14:41:52.586Z Vendors: Mozilla Products: Firefox Problem Types: XSL could have allowed JavaScript execution after a tab was closed Description: By using XSL Transforms, a malicious webserver could have served a user an XSL document that would continue to execute JavaScript (within the bounds of the same-origin policy) even after the tab was closed. This vulnerability affects Firefox < 97. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.mozilla.org/security/advisories/mfsa2022-04/ - https://bugzilla.mozilla.org/show_bug.cgi?id=1309630
CVE ID: CVE-2022-22756 State: PUBLISHED Published: 2022-12-22T00:00:00.000Z Last Updated: 2025-04-16T14:39:28.423Z Vendors: Mozilla Products: Firefox, Thunderbird, Firefox ESR Problem Types: Drag and dropping an image could have resulted in the dropped object being an executable Description: If a user was convinced to drag and drop an image to their desktop or other folder, the resulting object could have been changed into an executable script which would have run arbitrary code after the user clicked on it. This vulnerability affects Firefox < 97, Thunderbird < 91.6, and Firefox ESR < 91.6. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www
irefox ESR < 91.6. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.mozilla.org/security/advisories/mfsa2022-05/ - https://www.mozilla.org/security/advisories/mfsa2022-04/ - https://www.mozilla.org/security/advisories/mfsa2022-06/ - https://bugzilla.mozilla.org/show_bug.cgi?id=1317873
CVE ID: CVE-2022-22757 State: PUBLISHED Published: 2022-12-22T00:00:00.000Z Last Updated: 2025-04-16T14:32:58.625Z Vendors: Mozilla Products: Firefox Problem Types: Remote Agent did not prevent local websites from connecting Description: Remote Agent, used in WebDriver, did not validate the Host or Origin headers. This could have allowed websites to connect back locally to the user's browser to control it. <br>*This bug only affected Firefox when WebDriver was enabled, which is not the default configuration.*. This vulnerability affects Firefox < 97. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.mozilla.org/security/advisories/mfsa2022-
s: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.mozilla.org/security/advisories/mfsa2022-04/ - https://bugzilla.mozilla.org/show_bug.cgi?id=1720098
CVE ID: CVE-2022-22758 State: PUBLISHED Published: 2022-12-22T00:00:00.000Z Last Updated: 2025-04-16T14:28:13.361Z Vendors: Mozilla Products: Firefox Problem Types: tel: links could have sent USSD codes to the dialer on Firefox for Android Description: When clicking on a tel: link, USSD codes, specified after a <code>\*</code> character, would be included in the phone number. On certain phones, or on certain carriers, if the number was dialed this could perform actions on a user's account, similar to a cross-site request forgery attack.<br>*This bug only affects Firefox for Android. Other operating systems are unaffected.*. This vulnerability affects Firefox < 97. Additional Analyst Notes: -
Android. Other operating systems are unaffected.*. This vulnerability affects Firefox < 97. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.mozilla.org/security/advisories/mfsa2022-04/ - https://bugzilla.mozilla.org/show_bug.cgi?id=1728742
CVE ID: CVE-2022-22759 State: PUBLISHED Published: 2022-12-22T00:00:00.000Z Last Updated: 2025-04-16T14:36:55.841Z Vendors: Mozilla Products: Firefox, Thunderbird, Firefox ESR Problem Types: Sandboxed iframes could have executed script if the parent appended elements Description: If a document created a sandboxed iframe without <code>allow-scripts</code>, and subsequently appended an element to the iframe's document that e.g. had a JavaScript event handler - the event handler would have run despite the iframe's sandbox. This vulnerability affects Firefox < 97, Thunderbird < 91.6, and Firefox ESR < 91.6. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: -
91.6, and Firefox ESR < 91.6. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.mozilla.org/security/advisories/mfsa2022-05/ - https://www.mozilla.org/security/advisories/mfsa2022-04/ - https://www.mozilla.org/security/advisories/mfsa2022-06/ - https://bugzilla.mozilla.org/show_bug.cgi?id=1739957
CVE ID: CVE-2022-22760 State: PUBLISHED Published: 2022-12-22T00:00:00.000Z Last Updated: 2025-04-16T14:35:10.868Z Vendors: Mozilla Products: Firefox, Thunderbird, Firefox ESR Problem Types: Cross-Origin responses could be distinguished between script and non-script content-types Description: When importing resources using Web Workers, error messages would distinguish the difference between <code>application/javascript</code> responses and non-script responses. This could have been abused to learn information cross-origin. This vulnerability affects Firefox < 97, Thunderbird < 91.6, and Firefox ESR < 91.6. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References
d < 91.6, and Firefox ESR < 91.6. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.mozilla.org/security/advisories/mfsa2022-05/ - https://www.mozilla.org/security/advisories/mfsa2022-04/ - https://www.mozilla.org/security/advisories/mfsa2022-06/ - https://bugzilla.mozilla.org/show_bug.cgi?id=1740985 - https://bugzilla.mozilla.org/show_bug.cgi?id=1748503
CVE ID: CVE-2022-22761 State: PUBLISHED Published: 2022-12-22T00:00:00.000Z Last Updated: 2025-04-16T14:33:37.376Z Vendors: Mozilla Products: Firefox, Thunderbird, Firefox ESR Problem Types: frame-ancestors Content Security Policy directive was not enforced for framed extension pages Description: Web-accessible extension pages (pages with a moz-extension:// scheme) were not correctly enforcing the frame-ancestors directive when it was used in the Web Extension's Content Security Policy. This vulnerability affects Firefox < 97, Thunderbird < 91.6, and Firefox ESR < 91.6. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.mozilla.org/security/
itional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.mozilla.org/security/advisories/mfsa2022-05/ - https://www.mozilla.org/security/advisories/mfsa2022-04/ - https://www.mozilla.org/security/advisories/mfsa2022-06/ - https://bugzilla.mozilla.org/show_bug.cgi?id=1745566
CVE ID: CVE-2022-22762 State: PUBLISHED Published: 2022-12-22T00:00:00.000Z Last Updated: 2025-04-16T14:31:40.064Z Vendors: Mozilla Products: Firefox Problem Types: JavaScript Dialogs could have been displayed over other domains on Firefox for Android Description: Under certain circumstances, a JavaScript alert (or prompt) could have been shown while another website was displayed underneath it. This could have been abused to trick the user. <br>*This bug only affects Firefox for Android. Other operating systems are unaffected.*. This vulnerability affects Firefox < 97. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.mozilla.org/security/a
tional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.mozilla.org/security/advisories/mfsa2022-04/ - https://bugzilla.mozilla.org/show_bug.cgi?id=1743931