2022 CVE Vulnerabilities
27,563 CVEs published in 2022.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2022-26383 | MEDIUM | 4.3 | 0.7% | Dec 22, 2022 | When resizing a popup after requesting fullscreen access, the popup would not display the fullscreen notification. This ... |
| CVE-2022-26382 | MEDIUM | 4.3 | 0.5% | Dec 22, 2022 | While the text displayed in Autofill tooltips cannot be directly read by JavaScript, the text was rendered using page fo... |
| CVE-2022-26381 | HIGH | 8.8 | 0.8% | Dec 22, 2022 | An attacker could have caused a use-after-free by forcing a text reflow in an SVG object leading to a potentially exploi... |
| CVE-2022-22764 | HIGH | 8.8 | 0.7% | Dec 22, 2022 | Mozilla developers Paul Adenot and the Mozilla Fuzzing Team reported memory safety bugs present in Firefox 96 and Firefo... |
| CVE-2022-22763 | HIGH | 8.8 | 0.6% | Dec 22, 2022 | When a worker is shutdown, it was possible to cause script to run late in the lifecycle, at a point after where it shoul... |
| CVE-2022-22762 | MEDIUM | 4.3 | 0.4% | Dec 22, 2022 | Under certain circumstances, a JavaScript alert (or prompt) could have been shown while another website was displayed un... |
| CVE-2022-22761 | HIGH | 8.8 | 0.7% | Dec 22, 2022 | Web-accessible extension pages (pages with a moz-extension:// scheme) were not correctly enforcing the frame-ancestors d... |
| CVE-2022-22760 | MEDIUM | 6.5 | 0.8% | Dec 22, 2022 | When importing resources using Web Workers, error messages would distinguish the difference between <code>application/ja... |
| CVE-2022-22759 | CRITICAL | 9.6 | 0.7% | Dec 22, 2022 | If a document created a sandboxed iframe without <code>allow-scripts</code>, and subsequently appended an element to the... |
| CVE-2022-22758 | HIGH | 8.8 | 0.4% | Dec 22, 2022 | When clicking on a tel: link, USSD codes, specified after a <code>\*</code> character, would be included in the phone nu... |
| CVE-2022-22757 | MEDIUM | 6.5 | 0.2% | Dec 22, 2022 | Remote Agent, used in WebDriver, did not validate the Host or Origin headers. This could have allowed websites to connec... |
| CVE-2022-22756 | HIGH | 8.8 | 0.9% | Dec 22, 2022 | If a user was convinced to drag and drop an image to their desktop or other folder, the resulting object could have been... |
| CVE-2022-22755 | HIGH | 8.8 | 0.6% | Dec 22, 2022 | By using XSL Transforms, a malicious webserver could have served a user an XSL document that would continue to execute J... |
| CVE-2022-22754 | MEDIUM | 6.5 | 0.6% | Dec 22, 2022 | If a user installed an extension of a particular type, the extension could have auto-updated itself and while doing so, ... |
| CVE-2022-22753 | HIGH | 7.1 | 0.6% | Dec 22, 2022 | A Time-of-Check Time-of-Use bug existed in the Maintenance (Updater) Service that could be abused to grant Users write a... |
| CVE-2022-22752 | HIGH | 8.8 | 0.5% | Dec 22, 2022 | Mozilla developers Christian Holler and Jason Kratzer reported memory safety bugs present in Firefox 95. Some of these b... |
| CVE-2022-22751 | HIGH | 8.8 | 0.9% | Dec 22, 2022 | Mozilla developers Calixte Denizet, Kershaw Chang, Christian Holler, Jason Kratzer, Gabriele Svelto, Tyson Smith, Simon ... |
| CVE-2022-22750 | MEDIUM | 6.5 | 0.6% | Dec 22, 2022 | By generally accepting and passing resource handles across processes, a compromised content process might have confused ... |
| CVE-2022-22749 | MEDIUM | 4.3 | 0.4% | Dec 22, 2022 | When scanning QR codes, Firefox for Android would have allowed navigation to some URLs that do not point to web content.... |
| CVE-2022-22748 | MEDIUM | 6.5 | 0.7% | Dec 22, 2022 | Malicious websites could have confused Firefox into showing the wrong origin when asking to launch a program and handlin... |
| CVE-2022-22747 | MEDIUM | 6.5 | 0.6% | Dec 22, 2022 | After accepting an untrusted certificate, handling an empty pkcs7 sequence as part of the certificate data could have le... |
| CVE-2022-22746 | MEDIUM | 5.9 | 0.6% | Dec 22, 2022 | A race condition could have allowed bypassing the fullscreen notification which could have lead to a fullscreen window s... |
| CVE-2022-22745 | MEDIUM | 6.5 | 0.6% | Dec 22, 2022 | Securitypolicyviolation events could have leaked cross-origin information for frame-ancestors violations. This vulnerabi... |
| CVE-2022-22744 | HIGH | 8.8 | 1.3% | Dec 22, 2022 | The constructed curl command from the "Copy as curl" feature in DevTools was not properly escaped for PowerShell. This c... |
| CVE-2022-22743 | MEDIUM | 4.3 | 0.6% | Dec 22, 2022 | When navigating from inside an iframe while requesting fullscreen access, an attacker-controlled tab could have made the... |
Check if your code is affected by 2022 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now