CVE-2022-34469

When a TLS Certificate error occurs on a domain protected by the HSTS header, the browser should not allow the user to bypass the certificate error. On Firefox for Android, the user was presented with the option to bypass the error; this could only have been done by the user explicitly. <br>*This bug only affects Firefox for Android. Other operating systems are unaffected.*. This vulnerability affects Firefox < 102.

• CWE-295
• CWE-295

• https://bugzilla.mozilla.org/show_bug.cgi?id=1721220Issue Tracking, Permissions Required, Vendor Advisory
• https://www.mozilla.org/security/advisories/mfsa2022-24/Vendor Advisory
• https://bugzilla.mozilla.org/show_bug.cgi?id=1721220Issue Tracking, Permissions Required, Vendor Advisory
• https://www.mozilla.org/security/advisories/mfsa2022-24/Vendor Advisory
• https://bugzilla.mozilla.org/show_bug.cgi?id=1721220Issue Tracking, Permissions Required, Vendor Advisory

Published

Dec 22, 2022

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2022-34462 Dell EMC SCG Policy Manager, versions from 5.10 to 5.12, co…7.8
• CVE-2022-34464A vulnerability has been identified in SICAM GridEdge (Class…6.3
• CVE-2022-34465A vulnerability has been identified in Parasolid V33.1 (All …7.8
• CVE-2022-34466A vulnerability has been identified in Mendix Applications u…6.5
• CVE-2022-34467A vulnerability has been identified in Mendix Excel Importer…6.5
• CVE-2022-34468An iframe that was not permitted to run scripts could do so …8.8
• CVE-2022-3447Inappropriate implementation in Custom Tabs in Google Chrome…4.3
• CVE-2022-34470Session history navigations may have led to a use-after-free…9.8
• CVE-2022-34471When downloading an update for an addon, the downloaded addo…6.5
• CVE-2022-34472If there was a PAC URL set and the server that hosts the PAC…4.3
• CVE-2022-34473The HTML Sanitizer should have sanitized the <code>href</cod…6.1
• CVE-2022-34474Even when an iframe was sandboxed with <code>allow-top-navig…6.1