CLEANSTART-2024-VT87384 Due to a layout change, iframe contents could have been rendered outside of its border

🗓️ 31 Oct 2026 14:30:30Reported by GoogleType

osv_cleanstart🔗 osv.dev👁 5 Views

Layout change in multiple packages allows iframe contents to render outside borders.

Reporter	Title	Published	Views	Family All 183
ALT Linux	Security fix for the ALT Linux 10 package thunderbird version 91.8.0-alt1	6 Apr 202200:00	–	altlinux
ALT Linux	Security fix for the ALT Linux 10 package firefox-esr version 91.8.0-alt1	6 Apr 202200:00	–	altlinux
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in Mozilla Firefox affect IBM Cloud Pak for Multicloud Management Monitoring.	31 Jan 202314:47	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities of Mozilla Firefox (less than Firefox 91.8.0ESR) have affected Synthetic Playback Agent 8.1.4.0-8.1.4 IF16 - 2022.4.0	29 Apr 202204:43	–	ibm
Tenable Nessus	Amazon Linux 2 : thunderbird (ALAS-2022-1789)	27 Apr 202200:00	–	nessus
Tenable Nessus	CentOS 7 : firefox (RHSA-2022:1284)	9 Oct 202400:00	–	nessus
Tenable Nessus	CentOS 7 : thunderbird (RHSA-2022:1302)	9 Oct 202400:00	–	nessus
Tenable Nessus	Rocky Linux 8 [CIQ] Security Update: firefox / firefox-debuginfo / firefox-debugsource Multiple Vulnerabilities (crlsa-2022_1287)	1 Oct 202600:00	–	nessus
Tenable Nessus	Rocky Linux 8 [CIQ] Security Update: thunderbird / thunderbird-debuginfo / thunderbird-debugsource Multiple Vulnerabilities (crlsa-2022_1301)	1 Oct 202600:00	–	nessus
Tenable Nessus	Debian DLA-2971-1 : firefox-esr - LTS security update	7 Apr 202200:00	–	nessus

Source	Link
github	www.github.com/cleanstart-dev/cleanstart-security-advisories/tree/main/advisories/2024/CLEANSTART-2024-VT87384.json
osv	www.osv.dev/vulnerability/CVE-2022-28286
nvd	www.nvd.nist.gov/vuln/detail/CVE-2022-28286

31 Oct 2026 16:30Current

6.3Medium risk

Vulners AI Score6.3

CVSS 3.15.4

EPSS0.00584

multiple packages iframe layout change