CVE-2022-3032

When receiving an HTML email that contained an <code>iframe</code> element, which used a <code>srcdoc</code> attribute to define the inner HTML document, remote objects specified in the nested document, for example images or videos, were not blocked. Rather, the network was accessed, the objects were loaded and displayed. This vulnerability affects Thunderbird < 102.2.1 and Thunderbird < 91.13.1.

• CWE-610

• https://bugzilla.mozilla.org/show_bug.cgi?id=1783831Permissions Required
• https://www.mozilla.org/security/advisories/mfsa2022-38/Vendor Advisory
• https://www.mozilla.org/security/advisories/mfsa2022-39/Vendor Advisory
• https://bugzilla.mozilla.org/show_bug.cgi?id=1783831Permissions Required
• https://www.mozilla.org/security/advisories/mfsa2022-38/Vendor Advisory
• https://www.mozilla.org/security/advisories/mfsa2022-39/Vendor Advisory

Published

Dec 22, 2022

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2022-30314Honeywell Experion PKS Safety Manager 5.02 uses Hard-coded C…4.6
• CVE-2022-30315Honeywell Experion PKS Safety Manager (SM and FSC) through 2…9.8
• CVE-2022-30316Honeywell Experion PKS Safety Manager 5.02 has Insufficient …6.8
• CVE-2022-30317Honeywell Experion LX through 2022-05-06 has Missing Authent…9.1
• CVE-2022-30318Honeywell ControlEdge through R151.1 uses Hard-coded Credent…9.8
• CVE-2022-30319Saia Burgess Controls (SBC) PCD through 2022-05-06 allows Au…8.1
• CVE-2022-30320Saia Burgess Controls (SBC) PCD through 2022-05-06 uses a Br…4.3
• CVE-2022-30321go-getter up to 1.5.11 and 2.0.2 allowed arbitrary host acce…8.6
• CVE-2022-30322go-getter up to 1.5.11 and 2.0.2 allowed asymmetric resource…8.6
• CVE-2022-30323go-getter up to 1.5.11 and 2.0.2 panicked when processing pa…8.6
• CVE-2022-30324HashiCorp Nomad and Nomad Enterprise version 0.2.0 up to 1.3…9.8
• CVE-2022-30325An issue was found on TRENDnet TEW-831DR 1.0 601.130.1.1356 …8.8