Multiple vulnerabilities in Mozilla Firefox

Popis

Multiple vulnerabilities were found in Mozilla Firefox. Malicious users can exploit these vulnerabilities to obtain sensitive information, bypass security restrictions, cause denial of service, execute arbitrary code, spoof user interface.

Below is a complete list of vulnerabilities:

1. Denial of service vulnerability can be exploited to cause denial of service.
2. Security vulnerability can be exploited to bypass security restrictions.
3. Denial of service vulnerability in WASM on arm64 can be exploited to cause denial of service.
4. Heap buffer overflow vulnerability in WebGL can be exploited to cause denial of service.
5. A remote code execution vulnerability can be exploited to execute arbitrary code.
6. A memory corruption vulnerability can be exploited to execute arbitrary code.
7. Spoof user interface vulnerability in fullscreen mode can be exploited to spoof user interface.
8. Obtain sensitive information vulnerability in WebAuthn token can be exploited to obtain sensitive information.
9. Denial of service vulnerability can be exploited to cause denial of service or execute arbitrary code.

Oficiální doporučení

• MFSA2022-20

Vykořisťování

Public exploits exist for this vulnerability.

Související produkty

• Mozilla-Firefox

seznam CVE

• CVE-2022-31736
  critical
• CVE-2022-31747
  critical
• CVE-2022-31740
  critical
• CVE-2022-31737
  critical
• CVE-2022-31744
  high
• CVE-2022-1919
  critical
• CVE-2022-31745
  warning
• CVE-2022-31743
  high
• CVE-2022-31741
  critical
• CVE-2022-31738
  high
• CVE-2022-31742
  high
• CVE-2022-31739
  critical
• CVE-2022-31748
  critical

Zobrazit více

Zjistěte statistiky zranitelností šířících se ve vaší oblasti statistics.securelist.com