CVE-2022-2200

HIGH 8.8CVE-2022-2200 · Published 22/12/2022 · updated 17/06/2026

Package	Affected versions	Patched versions
firefox mozilla	`< 102.0`	`102.0`
firefox esr mozilla	`< 91.11`	`91.11`
thunderbird mozilla	`< 91.11`	`91.11`

Description

If an object prototype was corrupted by an attacker, they would have been able to set undesired attributes on a JavaScript object, leading to privileged code execution. This vulnerability affects Firefox < 102, Firefox ESR < 91.11, Thunderbird < 102, and Thunderbird < 91.11.

References

bugzilla.mozilla.org/show_bug.cgi · Issue Tracking
mozilla.org/security/advisories/mfsa2022-24 · Vendor Advisory
mozilla.org/security/advisories/mfsa2022-25 · Vendor Advisory
mozilla.org/security/advisories/mfsa2022-26 · Vendor Advisory

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free