Lucene search
Debian Security Bug TrackerDEBIANCVE:CVE-2022-26385HistoryDec 22, 2022 - 8:15 p.m.
CVE-2022-26385
2022-12-2220:15:21
Debian Security Bug Tracker
security-tracker.debian.org
51
firefox
thread
shutdown
CVSS3
6.5
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
EPSS
0.001
Percentile
35.4%
In unusual circumstances, an individual thread may outlive the thread’s manager during shutdown. This could have led to a use-after-free causing a potentially exploitable crash. This vulnerability affects Firefox < 98.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Debian | 999 | all | firefox | < 98.0-1 | firefox_98.0-1_all.deb |
Related
cve
cve
CVE-2022-26385
2022-12-22 20:15:21
nvd
nvd
CVE-2022-26385
2022-12-22 20:15:21
veracode
veracode
Denial Of Service (DoS)
2022-03-10 04:20:50
prion
prion
Design/Logic Flaw
2022-12-22 20:15:00
alpinelinux
alpinelinux
CVE-2022-26385
2022-12-22 20:15:21
ubuntucve
ubuntucve
CVE-2022-26385
2022-03-09 00:00:00
cvelist
cvelist
CVE-2022-26385
2022-12-22 00:00:00
osv
osv
firefox vulnerabilities
2022-03-10 18:57:29
firefox regressions
2022-03-24 15:26:03
firefox vulnerabilities
2022-03-17 12:47:30
openvas
openvas
Mozilla Firefox Security Advisory (MFSA2022-10) - Mac OS X
2022-07-07 00:00:00
Ubuntu: Security Advisory (USN-5321-1)
2022-03-11 00:00:00
Ubuntu: Security Advisory (USN-5321-3)
2022-03-25 00:00:00
nessus
nessus
Ubuntu 18.04 LTS / 20.04 LTS : Firefox vulnerabilities (USN-5321-2)
2022-03-17 00:00:00
Ubuntu 18.04 LTS / 20.04 LTS : Firefox regressions (USN-5321-3)
2022-03-24 00:00:00
Mozilla Firefox < 98.0
2022-03-08 00:00:00
ubuntu
ubuntu
Firefox vulnerabilities
2022-03-17 00:00:00
Firefox vulnerabilities
2022-03-10 00:00:00
Firefox regressions
2022-03-24 00:00:00
mozilla
mozilla
Security Vulnerabilities fixed in Firefox 98 — Mozilla
2022-03-08 00:00:00
kaspersky
kaspersky
KLA12471 Multiple vulnerabilities in Mozilla Firefox
2022-03-08 00:00:00
gentoo
gentoo
Mozilla Firefox: Multiple Vulnerabilities
2022-08-10 00:00:00
CVSS3
6.5
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
EPSS
0.001
Percentile
35.4%
Related for DEBIANCVE:CVE-2022-26385