CVE-2022-0843

Mozilla developers Kershaw Chang, Ryan VanderMeulen, and Randell Jesup reported memory safety bugs present in Firefox 97. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Firefox < 98.

• CWE-787
• CWE-787

• https://bugzilla.mozilla.org/buglist.cgi?bug_id=1746523%2C1749062%2C1749164%2C1749214%2C1749610%2C1750032%2C1752100%2C1752405%2C1753612%2C1754508Issue Tracking, Vendor Advisory
• https://www.mozilla.org/security/advisories/mfsa2022-10/Vendor Advisory
• https://bugzilla.mozilla.org/buglist.cgi?bug_id=1746523%2C1749062%2C1749164%2C1749214%2C1749610%2C1750032%2C1752100%2C1752405%2C1753612%2C1754508Issue Tracking, Vendor Advisory
• https://www.mozilla.org/security/advisories/mfsa2022-10/Vendor Advisory

Published

Dec 22, 2022

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2022-0837The Amelia WordPress plugin before 1.0.48 does not have prop…5.4
• CVE-2022-0838Cross-site Scripting (XSS) - Reflected in GitHub repository …6.1
• CVE-2022-0839Improper Restriction of XML External Entity Reference in Git…9.8
• CVE-2022-0840The Easy Social Icons WordPress plugin before 3.2.1 does not…4.8
• CVE-2022-0841OS Command Injection in GitHub repository ljharb/npm-lockfil…9.8
• CVE-2022-0842A blind SQL injection vulnerability in McAfee Enterprise ePo…4.9
• CVE-2022-0844Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2022-0845Code Injection in GitHub repository pytorchlightning/pytorch…9.8
• CVE-2022-0846The SpeakOut! Email Petitions WordPress plugin before 2.14.1…9.8
• CVE-2022-0847A flaw was found in the way the "flags" member of the new pi…7.8
• CVE-2022-0848OS Command Injection in GitHub repository part-db/part-db pr…9.8
• CVE-2022-0849Use After Free in r_reg_get_name_idx in GitHub repository ra…5.5