CVE-2022-22761

Web-accessible extension pages pages with a moz-extension:// scheme were not correctly enforcing the frame-ancestors directive when it was used in the Web Extension's Content Security Policy. This vulnerability affects Firefox 97, Thunderbird 91.6, and Firefox ESR 91.6...

PT-2022-1584

Name of the Vulnerable Software and Affected Versions Firefox versions prior to 97 Thunderbird versions prior to 91.6 Firefox ESR versions prior to 91.6 Description The vulnerability is related to errors in the Content Security Policy CSP settings of the Mozilla Firefox browser and Mozilla...

Mozilla Firefox < 97.0

The version of Firefox installed on the remote Windows host is prior to 97.0. It is, therefore, affected by multiple vulnerabilities as referenced in the mfsa2022-04 advisory. - Mozilla developers Paul Adenot and the Mozilla Fuzzing Team reported memory safety bugs present in Firefox 96 and Firef...