Kaspersky ID:
KLA12576
Date de la détection:
06/28/2022
Mis à jour:
01/28/2026

Description

Multiple vulnerabilities were found in Mozilla Firefox ESR. Malicious users can exploit these vulnerabilities to obtain sensitive information, execute arbitrary code, cause denial of service, bypass security restrictions, spoof user interface.

Below is a complete list of vulnerabilities:

  1. Information disclosure vulnerability in OCSP requests can be exploited to obtain sensitive information.
  2. Use after free vulnerability in nsSHistory can be exploited to cause denial of service or execute arbitrary code.
  3. Security vulnerability can be exploited to bypass security restrictions.
  4. Denial of service vulnerability can be exploited to cause denial of service.
  5. A remote code execution vulnerability can be exploited remotely to execute arbitrary code.
  6. Integer underflow vulnerability in ReplaceElementsAt can be exploited to cause denial of service.
  7. A remote code execution vulnerability can be exploited to execute arbitrary code.
  8. Security UI vulnerability in cursor can be exploited to spoof user interface.

Fiches de renseignement originales

Exploitation

Public exploits exist for this vulnerability.

Produits associés

Liste CVE

  • CVE-2022-31744
    high
  • CVE-2022-34472
    warning
  • CVE-2022-34470
    critical
  • CVE-2022-34468
    critical
  • CVE-2022-34478
    high
  • CVE-2022-2200
    critical
  • CVE-2022-34481
    critical
  • CVE-2022-34484
    critical
  • CVE-2022-34479
    high

En savoir plus

Découvrez les statistiques de la propagation des vulnérabilités dans votre région statistics.securelist.com

Vous avez trouvé une inexactitude dans la description de cette vulnérabilité ? Faites-le nous savoir !
Kaspersky IT Security Calculator:
Calculez le profil de sécurité de votre entreprise
Apprendre encore plus
Kaspersky!
Votre vie en ligne mérite une protection complète!
Apprendre encore plus
Do you want to save your changes?
Your message has been sent successfully.