2022 CVE Vulnerabilities
27,557 CVEs published in 2022.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2022-2226 | MEDIUM | 6.5 | 0.4% | Dec 22, 2022 | An OpenPGP digital signature includes information about the date when the signature was created. When displaying an emai... |
| CVE-2022-29916 | MEDIUM | 6.5 | 0.7% | Dec 22, 2022 | Firefox behaved slightly differently for already known resources when loading CSS resources involving CSS variables. Thi... |
| CVE-2022-29915 | MEDIUM | 4.3 | 0.3% | Dec 22, 2022 | The Performance API did not properly hide the fact whether a request cross-origin resource has observed redirects. This ... |
| CVE-2022-29914 | MEDIUM | 6.5 | 0.6% | Dec 22, 2022 | When reusing existing popups Firefox would have allowed them to cover the fullscreen notification UI, which could have e... |
| CVE-2022-29913 | MEDIUM | 6.5 | 0.4% | Dec 22, 2022 | The parent process would not properly check whether the Speech Synthesis feature is enabled, when receiving instructions... |
| CVE-2022-29912 | MEDIUM | 6.1 | 0.6% | Dec 22, 2022 | Requests initiated through reader mode did not properly omit cookies with a SameSite attribute. This vulnerability affec... |
| CVE-2022-29911 | MEDIUM | 6.1 | 0.6% | Dec 22, 2022 | An improper implementation of the new iframe sandbox keyword <code>allow-top-navigation-by-user-activation</code> could ... |
| CVE-2022-29910 | MEDIUM | 6.1 | 0.4% | Dec 22, 2022 | When closed or sent to the background, Firefox for Android would not properly record and persist HSTS settings.<br>*Note... |
| CVE-2022-28287 | MEDIUM | 6.5 | 0.5% | Dec 22, 2022 | In unusual circumstances, selecting text could cause text selection caching to behave incorrectly, leading to a crash. T... |
| CVE-2022-28286 | MEDIUM | 5.4 | 0.6% | Dec 22, 2022 | Due to a layout change, iframe contents could have been rendered outside of its border. This could have led to user conf... |
| CVE-2022-28285 | MEDIUM | 6.5 | 0.8% | Dec 22, 2022 | When generating the assembly code for <code>MLoadTypedArrayElementHole</code>, an incorrect AliasSet was used. In conjun... |
| CVE-2022-28283 | MEDIUM | 6.5 | 0.6% | Dec 22, 2022 | The sourceMapURL feature in devtools was missing security checks that would have allowed a webpage to attempt to include... |
| CVE-2022-28282 | MEDIUM | 6.5 | 2.0% | Dec 22, 2022 | By using a link with <code>rel="localization"</code> a use-after-free could have been triggered by destroying an object ... |
| CVE-2022-26386 | MEDIUM | 6.5 | 0.7% | Dec 22, 2022 | Previously Firefox for macOS and Linux would download temporary files to a user-specific directory in <code>/tmp</code>,... |
| CVE-2022-26385 | MEDIUM | 6.5 | 0.6% | Dec 22, 2022 | In unusual circumstances, an individual thread may outlive the thread's manager during shutdown. This could have led to ... |
| CVE-2022-26383 | MEDIUM | 4.3 | 0.7% | Dec 22, 2022 | When resizing a popup after requesting fullscreen access, the popup would not display the fullscreen notification. This ... |
| CVE-2022-26382 | MEDIUM | 4.3 | 0.5% | Dec 22, 2022 | While the text displayed in Autofill tooltips cannot be directly read by JavaScript, the text was rendered using page fo... |
| CVE-2022-22762 | MEDIUM | 4.3 | 0.4% | Dec 22, 2022 | Under certain circumstances, a JavaScript alert (or prompt) could have been shown while another website was displayed un... |
| CVE-2022-22760 | MEDIUM | 6.5 | 0.8% | Dec 22, 2022 | When importing resources using Web Workers, error messages would distinguish the difference between <code>application/ja... |
| CVE-2022-22757 | MEDIUM | 6.5 | 0.2% | Dec 22, 2022 | Remote Agent, used in WebDriver, did not validate the Host or Origin headers. This could have allowed websites to connec... |
| CVE-2022-22754 | MEDIUM | 6.5 | 0.6% | Dec 22, 2022 | If a user installed an extension of a particular type, the extension could have auto-updated itself and while doing so, ... |
| CVE-2022-22750 | MEDIUM | 6.5 | 0.6% | Dec 22, 2022 | By generally accepting and passing resource handles across processes, a compromised content process might have confused ... |
| CVE-2022-22749 | MEDIUM | 4.3 | 0.4% | Dec 22, 2022 | When scanning QR codes, Firefox for Android would have allowed navigation to some URLs that do not point to web content.... |
| CVE-2022-22748 | MEDIUM | 6.5 | 0.7% | Dec 22, 2022 | Malicious websites could have confused Firefox into showing the wrong origin when asking to launch a program and handlin... |
| CVE-2022-22747 | MEDIUM | 6.5 | 0.6% | Dec 22, 2022 | After accepting an untrusted certificate, handling an empty pkcs7 sequence as part of the certificate data could have le... |
Check if your code is affected by 2022 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now