Lucene search
HistoryDec 22, 2022 - 8:15 p.m.
CVE-2022-26385
thread management
use-after-free
exploitable vulnerability
firefox < 98 security bug
CVSS3
6.5
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
EPSS
0.001
Percentile
35.4%
In unusual circumstances, an individual thread may outlive the thread’s manager during shutdown. This could have led to a use-after-free causing a potentially exploitable crash. This vulnerability affects Firefox < 98.
Affected configurations
Node
mozillafirefoxRange<98.0
Related
cve
cve
CVE-2022-26385
2022-12-22 20:15:21
debiancve
debiancve
CVE-2022-26385
2022-12-22 20:15:21
veracode
veracode
Denial Of Service (DoS)
2022-03-10 04:20:50
prion
prion
Design/Logic Flaw
2022-12-22 20:15:00
alpinelinux
alpinelinux
CVE-2022-26385
2022-12-22 20:15:21
ubuntucve
ubuntucve
CVE-2022-26385
2022-03-09 00:00:00
cvelist
cvelist
CVE-2022-26385
2022-12-22 00:00:00
osv
osv
firefox vulnerabilities
2022-03-10 18:57:29
firefox vulnerabilities
2022-03-17 12:47:30
firefox regressions
2022-03-24 15:26:03
openvas
openvas
Mozilla Firefox Security Advisory (MFSA2022-10) - Mac OS X
2022-07-07 00:00:00
Ubuntu: Security Advisory (USN-5321-1)
2022-03-11 00:00:00
Mozilla Firefox Security Advisory (MFSA2022-10) - Linux
2022-04-27 00:00:00
nessus
nessus
Ubuntu 18.04 LTS / 20.04 LTS : Firefox vulnerabilities (USN-5321-2)
2022-03-17 00:00:00
Mozilla Firefox < 98.0
2022-03-08 00:00:00
Ubuntu 18.04 LTS / 20.04 LTS : Firefox regressions (USN-5321-3)
2022-03-24 00:00:00
mozilla
mozilla
Security Vulnerabilities fixed in Firefox 98 — Mozilla
2022-03-08 00:00:00
kaspersky
kaspersky
KLA12471 Multiple vulnerabilities in Mozilla Firefox
2022-03-08 00:00:00
ubuntu
ubuntu
Firefox vulnerabilities
2022-03-17 00:00:00
Firefox vulnerabilities
2022-03-10 00:00:00
Firefox regressions
2022-03-24 00:00:00
gentoo
gentoo
Mozilla Firefox: Multiple Vulnerabilities
2022-08-10 00:00:00
CVSS3
6.5
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
EPSS
0.001
Percentile
35.4%
Related for NVD:CVE-2022-26385