CVE-2022-34484

The Mozilla Fuzzing Team reported potential vulnerabilities present in Thunderbird 91.10. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Firefox < 102, Firefox ESR < 91.11, Thunderbird < 102, and Thunderbird < 91.11.

• CWE-416
• CWE-416

• https://bugzilla.mozilla.org/buglist.cgi?bug_id=1763634%2C1772651Exploit, Issue Tracking, Vendor Advisory
• https://www.mozilla.org/security/advisories/mfsa2022-24/Vendor Advisory
• https://www.mozilla.org/security/advisories/mfsa2022-25/Vendor Advisory
• https://www.mozilla.org/security/advisories/mfsa2022-26/Vendor Advisory
• https://bugzilla.mozilla.org/buglist.cgi?bug_id=1763634%2C1772651Exploit, Issue Tracking, Vendor Advisory
• https://www.mozilla.org/security/advisories/mfsa2022-24/Vendor Advisory
• https://www.mozilla.org/security/advisories/mfsa2022-25/Vendor Advisory
• https://www.mozilla.org/security/advisories/mfsa2022-26/Vendor Advisory

Published

Dec 22, 2022

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2022-34479A malicious website that could create a popup could have res…6.5
• CVE-2022-3448Use after free in Permissions API in Google Chrome prior to …8.8
• CVE-2022-34480Within the <code>lg_init()</code> function, if several alloc…8.8
• CVE-2022-34481In the <code>nsTArray_Impl::ReplaceElementsAt()</code> funct…8.8
• CVE-2022-34482An attacker who could have convinced a user to drag and drop…8.8
• CVE-2022-34483An attacker who could have convinced a user to drag and drop…8.8
• CVE-2022-34485Mozilla developers Bryce Seager van Dyk and the Mozilla Fuzz…9.8
• CVE-2022-34486Path traversal vulnerability in PukiWiki versions 1.4.5 to 1…7.2
• CVE-2022-34487Unauthenticated Arbitrary Option Update vulnerability in bip…5.3
• CVE-2022-34488Improper buffer restrictions in the firmware for some Intel(…7.8
• CVE-2022-34489Rejected reason: This CVE ID has been rejected or withdrawn …
• CVE-2022-3449Use after free in Safe Browsing in Google Chrome prior to 10…8.8