2022 CVE Vulnerabilities
27,563 CVEs published in 2022.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2022-45410 | MEDIUM | 6.5 | 0.7% | Dec 22, 2022 | When a ServiceWorker intercepted a request with <code>FetchEvent</code>, the origin of the request was lost after the Se... |
| CVE-2022-45409 | HIGH | 8.8 | 0.8% | Dec 22, 2022 | The garbage collector could have been aborted in several states and zones and <code>GCRuntime::finishCollection</code> m... |
| CVE-2022-45408 | MEDIUM | 6.5 | 0.7% | Dec 22, 2022 | Through a series of popups that reuse windowName, an attacker can cause a window to go fullscreen without the user seein... |
| CVE-2022-45407 | HIGH | 7.5 | 0.6% | Dec 22, 2022 | If an attacker loaded a font using <code>FontFace()</code> on a background worker, a use-after-free could have occurred,... |
| CVE-2022-45406 | CRITICAL | 9.8 | 1.1% | Dec 22, 2022 | If an out-of-memory condition occurred when creating a JavaScript global, a JavaScript realm may be deleted while refere... |
| CVE-2022-45405 | MEDIUM | 6.5 | 0.6% | Dec 22, 2022 | Freeing arbitrary <code>nsIInputStream</code>'s on a different thread than creation could have led to a use-after-free a... |
| CVE-2022-45404 | MEDIUM | 6.5 | 0.6% | Dec 22, 2022 | Through a series of popup and <code>window.print()</code> calls, an attacker can cause a window to go fullscreen without... |
| CVE-2022-45403 | MEDIUM | 6.5 | 0.7% | Dec 22, 2022 | Service Workers should not be able to infer information about opaque cross-origin responses; but timing information for ... |
| CVE-2022-42932 | HIGH | 8.8 | 0.7% | Dec 22, 2022 | Mozilla developers Ashley Hale and the Mozilla Fuzzing Team reported memory safety bugs present in Firefox 105 and Firef... |
| CVE-2022-42931 | LOW | 3.3 | 0.1% | Dec 22, 2022 | Logins saved by Firefox should be managed by the Password Manager component which uses encryption to save files on-disk.... |
| CVE-2022-42930 | HIGH | 7.1 | 0.4% | Dec 22, 2022 | If two Workers were simultaneously initializing their CacheStorage, a data race could have occurred in the `ThirdPartyUt... |
| CVE-2022-42929 | MEDIUM | 6.5 | 0.7% | Dec 22, 2022 | If a website called `window.print()` in a particular way, it could cause a denial of service of the browser, which may p... |
| CVE-2022-42928 | HIGH | 8.8 | 0.8% | Dec 22, 2022 | Certain types of allocations were missing annotations that, if the Garbage Collector was in a specific state, could have... |
| CVE-2022-42927 | HIGH | 8.1 | 0.4% | Dec 22, 2022 | A same-origin policy violation could have allowed the theft of cross-origin URL entries, leaking the result of a redirec... |
| CVE-2022-40962 | HIGH | 8.8 | 1.3% | Dec 22, 2022 | Mozilla developers Nika Layzell, Timothy Nikkel, Sebastian Hengst, Andreas Pehrson, and the Mozilla Fuzzing Team reporte... |
| CVE-2022-40961 | MEDIUM | 6.5 | 0.6% | Dec 22, 2022 | During startup, a graphics driver with an unexpected name could lead to a stack-buffer overflow causing a potentially ex... |
| CVE-2022-40960 | MEDIUM | 6.5 | 0.9% | Dec 22, 2022 | Concurrent use of the URL parser with non-UTF-8 data was not thread-safe. This could lead to a use-after-free causing a ... |
| CVE-2022-40959 | MEDIUM | 6.5 | 1.3% | Dec 22, 2022 | During iframe navigation, certain pages did not have their FeaturePolicy fully initialized leading to a bypass that leak... |
| CVE-2022-40958 | MEDIUM | 6.5 | 1.1% | Dec 22, 2022 | By injecting a cookie with certain special characters, an attacker on a shared subdomain which is not a secure context c... |
| CVE-2022-40957 | MEDIUM | 6.5 | 1.1% | Dec 22, 2022 | Inconsistent data in instruction and data cache when creating wasm code could lead to a potentially exploitable crash.<b... |
| CVE-2022-40956 | MEDIUM | 6.1 | 0.9% | Dec 22, 2022 | When injecting an HTML base element, some requests would ignore the CSP's base-uri settings and accept the injected elem... |
| CVE-2022-3266 | MEDIUM | 5.5 | 0.3% | Dec 22, 2022 | An out-of-bounds read can occur when decoding H264 video. This results in a potentially exploitable crash. This vulnerab... |
| CVE-2022-3155 | HIGH | 7.8 | 0.2% | Dec 22, 2022 | When saving or opening an email attachment on macOS, Thunderbird did not set attribute com.apple.quarantine on the recei... |
| CVE-2022-3034 | MEDIUM | 4.3 | 0.5% | Dec 22, 2022 | When receiving an HTML email that specified to load an <code>iframe</code> element from a remote location, a request to ... |
| CVE-2022-3033 | HIGH | 8.1 | 0.8% | Dec 22, 2022 | If a Thunderbird user replied to a crafted HTML email containing a <code>meta</code> tag, with the <code>meta</code> tag... |
Check if your code is affected by 2022 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now