RHSA-2022:5479HighCVSS 9.8

Red Hat Security Advisory: firefox security update

Published
July 1, 2022
Last Modified
June 25, 2026

🔗 CVE IDs covered (8)

CVE-2022-34484 →CVE-2022-2200 →CVE-2022-31744 →CVE-2022-34468 →CVE-2022-34470 →CVE-2022-34472 →CVE-2022-34479 →CVE-2022-34481 →

📋 Description

CVE-2022-2200 — Mozilla: Undesired attributes could be set as part of prototype pollution CVE-2022-31744 — Mozilla: CSP bypass enabling stylesheet injection CVE-2022-34468 — Mozilla: CSP sandbox header without allow-scripts can be bypassed via retargeted javascript: URI CVE-2022-34470 — Mozilla: Use-after-free in nsSHistory CVE-2022-34472 — Mozilla: Unavailable PAC file resulted in OCSP requests being blocked CVE-2022-34479 — Mozilla: A popup window could be resized in a way to overlay the address bar with web content CVE-2022-34481 — Mozilla: Potential integer overflow in ReplaceElementsAt CVE-2022-34484 — Mozilla: Memory safety bugs fixed in Firefox 102 and Firefox ESR 91.11

🔗 References (11)