CVE-2022-0517

Mozilla VPN can load an OpenSSL configuration file from an unsecured directory. A user or attacker with limited privileges could leverage this to launch arbitrary code with SYSTEM privilege. This vulnerability affects Mozilla VPN < 2.7.1.

• CWE-434
• CWE-434

• https://bugzilla.mozilla.org/show_bug.cgi?id=1752291Issue Tracking, Permissions Required, Vendor Advisory
• https://www.mozilla.org/security/advisories/mfsa2022-08/Vendor Advisory
• https://bugzilla.mozilla.org/show_bug.cgi?id=1752291Issue Tracking, Permissions Required, Vendor Advisory
• https://www.mozilla.org/security/advisories/mfsa2022-08/Vendor Advisory

Published

Dec 22, 2022

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2022-0511Mozilla developers and community members Gabriele Svelto, Se…8.8
• CVE-2022-0512Authorization Bypass Through User-Controlled Key in NPM url-…5.3
• CVE-2022-0513The WP Statistics WordPress plugin is vulnerable to SQL Inje…7.5
• CVE-2022-0514Business Logic Errors in GitHub repository crater-invoice/cr…6.5
• CVE-2022-0515Cross-Site Request Forgery (CSRF) in GitHub repository crate…4.3
• CVE-2022-0516A vulnerability was found in kvm_s390_guest_sida_op in the a…7.8
• CVE-2022-0518Heap-based Buffer Overflow in GitHub repository radareorg/ra…7.1
• CVE-2022-0519Buffer Access with Incorrect Length Value in GitHub reposito…7.1
• CVE-2022-0520Use After Free in NPM radare2.js prior to 5.6.2.7.8
• CVE-2022-0521Access of Memory Location After End of Buffer in GitHub repo…7.1
• CVE-2022-0522Access of Memory Location Before Start of Buffer in NPM rada…7.1
• CVE-2022-0523Use After Free in GitHub repository radareorg/radare2 prior …7.8