CVE-2022-38476

概要

参考情報

• bugzilla.mozilla.org/show_bug.cgi · Issue Tracking
• mozilla.org/security/advisories/mfsa2022-34 · Vendor Advisory
• mozilla.org/security/advisories/mfsa2022-36 · Vendor Advisory

firefox esr のその他の脆弱性

• CVE-2024-9397中 6.1A missing delay in directory upload UI could have made it possible for an attacker to trick a user into granting permission via clickjacking…
• CVE-2024-9394高 7.5An attacker could, via a specially crafted multipart response, execute arbitrary JavaScript under the `resource://devtools` origin. This co…
• CVE-2024-9393高 7.5An attacker could, via a specially crafted multipart response, execute arbitrary JavaScript under the `resource://pdf.js` origin. This coul…
• CVE-2024-8387緊急 9.8Memory safety bugs present in Firefox 129, Firefox ESR 128.1, and Thunderbird 128.1. Some of these bugs showed evidence of memory corruption…
• CVE-2024-8386中 6.1If a site had been granted the permission to open popup windows, it could cause Select elements to appear on top of another site to perform …