CVE-2022-1197

When importing a revoked key that specified key compromise as the revocation reason, Thunderbird did not update the existing copy of the key that was not yet revoked, and the existing key was kept as non-revoked. Revocation statements that used another revocation reason, or that didn't specify a revocation reason, were unaffected. This vulnerability affects Thunderbird < 91.8.

• CWE-295
• CWE-295

• https://bugzilla.mozilla.org/show_bug.cgi?id=1754985Issue Tracking, Permissions Required, Vendor Advisory
• https://www.mozilla.org/security/advisories/mfsa2022-15/Vendor Advisory
• https://bugzilla.mozilla.org/show_bug.cgi?id=1754985Issue Tracking, Permissions Required, Vendor Advisory
• https://www.mozilla.org/security/advisories/mfsa2022-15/Vendor Advisory

Published

Dec 22, 2022

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2022-1191SSRF on index.php/cobrowse/proxycss/ in GitHub repository li…8.1
• CVE-2022-1192The Turn off all comments WordPress plugin through 1.0 does …6.1
• CVE-2022-1193Improper access control in GitLab CE/EE versions 10.7 prior …4.3
• CVE-2022-1194The Mobile Events Manager WordPress plugin before 1.4.8 does…8.8
• CVE-2022-1195A use-after-free vulnerability was found in the Linux kernel…5.5
• CVE-2022-1196After a VR Process is destroyed, a reference to it may have …6.5
• CVE-2022-1198A use-after-free vulnerabilitity was discovered in drivers/n…5.5
• CVE-2022-1199A flaw was found in the Linux kernel. This flaw allows an at…7.5
• CVE-2022-1201NULL Pointer Dereference in mrb_vm_exec with super in GitHub…6.5
• CVE-2022-1202The WP-CRM WordPress plugin through 1.2.1 does not validate …7.8
• CVE-2022-1203The Content Mask WordPress plugin before 1.8.4.1 does not ha…4.3
• CVE-2022-1204A use-after-free flaw was found in the Linux kernel’s Amateu…5.5