CVE-2022-26486

🗓️ 22 Dec 2022 00:00:00Reported by mozillaType

cve🔗 web.nvd.nist.gov📰️ 2 Media mentions👁 1550 Views

Unexpected message in WebGPU IPC framework leads to use-after-free and sandbox escape. Exploited in the wild

Reporter	Title	Published	Views	Family All 200
ALT Linux	Security fix for the ALT Linux 10 package firefox-esr version 91.6.1-alt1	11 Mar 202200:00	–	altlinux
ALT Linux	Security fix for the ALT Linux 10 package thunderbird version 91.6.2-alt1	15 Mar 202200:00	–	altlinux
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in Mozilla Firefox affect IBM Cloud Pak for Multicloud Management Monitoring.	31 Jan 202314:47	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities of Mozilla Firefox (less than Firefox 91.8.0ESR) have affected Synthetic Playback Agent 8.1.4.0-8.1.4 IF16 - 2022.4.0	29 Apr 202204:43	–	ibm
ATTACKERKB	CVE-2022-26486	22 Dec 202200:00	–	attackerkb
Tenable Nessus	Amazon Linux 2 : thunderbird (ALAS-2022-1779)	27 Apr 202200:00	–	nessus
Tenable Nessus	CentOS 7 : firefox (RHSA-2022:0824)	29 Mar 202200:00	–	nessus
Tenable Nessus	CentOS 7 : thunderbird (RHSA-2022:0850)	29 Mar 202200:00	–	nessus
Tenable Nessus	Debian DLA-2933-1 : firefox-esr - LTS security update	7 Mar 202200:00	–	nessus
Tenable Nessus	Debian DLA-2939-1 : thunderbird - LTS security update	9 Mar 202200:00	–	nessus

NVD

Vulners

Node

mozilla firefoxRange<91.6.1esr

mozilla firefoxRange<97.0.2-

mozilla firefoxRange<97.3.0android

mozilla firefox_focusRange<97.3.0

mozilla thunderbirdRange<91.6.2

[
  {
    "vendor": "Mozilla",
    "product": "Firefox",
    "versions": [
      {
        "version": "unspecified",
        "lessThan": "97.0.2",
        "status": "affected",
        "versionType": "custom"
      }
    ]
  },
  {
    "vendor": "Mozilla",
    "product": "Firefox ESR",
    "versions": [
      {
        "version": "unspecified",
        "lessThan": "91.6.1",
        "status": "affected",
        "versionType": "custom"
      }
    ]
  },
  {
    "vendor": "Mozilla",
    "product": "Firefox for Android",
    "versions": [
      {
        "version": "unspecified",
        "lessThan": "97.3.0",
        "status": "affected",
        "versionType": "custom"
      }
    ]
  },
  {
    "vendor": "Mozilla",
    "product": "Thunderbird",
    "versions": [
      {
        "version": "unspecified",
        "lessThan": "91.6.2",
        "status": "affected",
        "versionType": "custom"
      }
    ]
  },
  {
    "vendor": "Mozilla",
    "product": "Focus",
    "versions": [
      {
        "version": "unspecified",
        "lessThan": "97.3.0",
        "status": "affected",
        "versionType": "custom"
      }
    ]
  }
]

Source	Link
bugzilla	www.bugzilla.mozilla.org/show_bug.cgi
mozilla	www.mozilla.org/security/advisories/mfsa2022-09/
cisa	www.cisa.gov/known-exploited-vulnerabilities-catalog

04 Nov 2025 14:35Current

8.8High risk

Vulners AI Score8.8

CVSS 3.19.6

EPSS0.02529

SSVC