RHSA-2022:1302HighCVSS 8.8

Red Hat Security Advisory: thunderbird security update

Published
April 11, 2022
Last Modified
June 25, 2026

🔗 CVE IDs covered (9)

CVE-2022-1097 →CVE-2022-24713 →CVE-2022-28282 →CVE-2022-1196 →CVE-2022-1197 →CVE-2022-28281 →CVE-2022-28285 →CVE-2022-28286 →CVE-2022-28289 →

📋 Description

CVE-2022-1097 — Mozilla: Use-after-free in NSSToken objects CVE-2022-1196 — Mozilla: Use-after-free after VR Process destruction CVE-2022-1197 — Mozilla: OpenPGP revocation information was ignored CVE-2022-24713 — Mozilla: Denial of Service via complex regular expressions CVE-2022-28281 — Mozilla: Out of bounds write due to unexpected WebAuthN Extensions CVE-2022-28282 — Mozilla: Use-after-free in DocumentL10n::TranslateDocument CVE-2022-28285 — Mozilla: Incorrect AliasSet used in JIT Codegen CVE-2022-28286 — Mozilla: iframe contents could be rendered outside the border CVE-2022-28289 — Mozilla: Memory safety bugs fixed in Firefox 99 and Firefox ESR 91.8

🔗 References (12)