CVE-2022-1802

If an attacker was able to corrupt the methods of an Array object in JavaScript via prototype pollution, they could have achieved execution of attacker-controlled JavaScript code in a privileged context. This vulnerability affects Firefox ESR < 91.9.1, Firefox < 100.0.2, Firefox for Android < 100.3.0, and Thunderbird < 91.9.1.

• CWE-1321
• CWE-1321

• https://bugzilla.mozilla.org/show_bug.cgi?id=1770137Issue Tracking, Permissions Required, Vendor Advisory
• https://www.mozilla.org/security/advisories/mfsa2022-19/Vendor Advisory
• https://bugzilla.mozilla.org/show_bug.cgi?id=1770137Issue Tracking, Permissions Required, Vendor Advisory
• https://www.mozilla.org/security/advisories/mfsa2022-19/Vendor Advisory
• https://bugzilla.mozilla.org/show_bug.cgi?id=1770137Issue Tracking, Permissions Required, Vendor Advisory

Published

Dec 22, 2022

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2022-1796Use After Free in GitHub repository vim/vim prior to 8.2.497…7.8
• CVE-2022-1797A malformed Class 3 common industrial protocol message with …8.6
• CVE-2022-1798A path traversal vulnerability in KubeVirt versions up to 0.…6.5
• CVE-2022-1799Incorrect signature trust exists within Google Play services…9.8
• CVE-2022-1800The Export any WordPress data to XML/CSV WordPress plugin be…7.2
• CVE-2022-1801The Very Simple Contact Form WordPress plugin before 11.6 ex…7.5
• CVE-2022-1803Improper Restriction of Rendered UI Layers or Frames in GitH…6.9
• CVE-2022-1804accountsservice no longer drops permissions when writting .p…5.5
• CVE-2022-1805When connecting to Amazon Workspaces, the SHA256 presented b…8.1
• CVE-2022-1806Cross-site Scripting (XSS) - Reflected in GitHub repository …6.1
• CVE-2022-1807Multiple SQLi vulnerabilities in Webadmin allow for privileg…7.2
• CVE-2022-1808Execution with Unnecessary Privileges in GitHub repository p…8.8