CVE-2022-46883

Mozilla developers Gabriele Svelto, Yulia Startsev, Andrew McCreight and the Mozilla Fuzzing Team reported memory safety bugs present in Firefox 106. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code.<br />*Note*: This advisory was added on December 13th, 2022 after discovering it was inadvertently left out of the original advisory. The fix was included in the original release of Firefox 107. This vulnerability affects Firefox < 107.

• CWE-787
• CWE-88

• https://bugzilla.mozilla.org/buglist.cgi?bug_id=1584674%2C1791152%2C1792241%2C1792984%2C1793127%2C1794645Issue Tracking, Not Applicable, Vendor Advisory
• https://www.mozilla.org/security/advisories/mfsa2022-47/Vendor Advisory
• https://bugzilla.mozilla.org/buglist.cgi?bug_id=1584674%2C1791152%2C1792241%2C1792984%2C1793127%2C1794645Issue Tracking, Not Applicable, Vendor Advisory
• https://www.mozilla.org/security/advisories/mfsa2022-47/Vendor Advisory

Published

Dec 22, 2022

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2022-46878Mozilla developers Randell Jesup, Valentin Gosu, Olli Pettay…8.8
• CVE-2022-46879Mozilla developers and community members Lukas Bernhard, Gab…8.8
• CVE-2022-4688Improper Authorization in GitHub repository usememos/memos p…8.8
• CVE-2022-46880A missing check related to tex units could have led to a use…6.5
• CVE-2022-46881An optimization in WebGL was incorrect in some cases, and co…8.8
• CVE-2022-46882A use-after-free in WebGL extensions could have led to a pot…9.8
• CVE-2022-46884A potential use-after-free vulnerability existed in SVG Imag…8.8
• CVE-2022-46885Mozilla developers Timothy Nikkel, Ashley Hale, and the Mozi…8.8
• CVE-2022-46886There exists an open redirect within the response list updat…6.1
• CVE-2022-46887Multiple SQL injection vulnerabilities in NexusPHP before 1.…9.8
• CVE-2022-46888Multiple reflective cross-site scripting (XSS) vulnerabiliti…6.1
• CVE-2022-46889A persistent cross-site scripting (XSS) vulnerability in Nex…5.4