cbcvebase.
CVE-2022-28282
published 2022-12-22

CVE-2022-28282: By using a link with rel="localization" a use-after-free could have been triggered by destroying an object during JavaScript execution and then referencing the…

PriorityP430medium6.5CVSS 3.1
AVNACLPRNUIRSUCNINAH
EPSS
2.01%
78.5th percentile
By using a link with rel="localization" a use-after-free could have been triggered by destroying an object during JavaScript execution and then referencing the object through a freed pointer, leading to a potential exploitable crash. This vulnerability affects Thunderbird < 91.8, Firefox < 99, and Firefox ESR < 91.8.

Affected

18 ranges
VendorProductVersion rangeFixed in
debianfirefox< firefox 99.0-1 (sid)firefox 99.0-1 (sid)
debianfirefox-esr< firefox 99.0-1 (sid)firefox 99.0-1 (sid)
debianthunderbird< firefox 99.0-1 (sid)firefox 99.0-1 (sid)
mozillafirefox< 99.099.0
mozillafirefox
mozillafirefox>= 0 < 99.0+build2-0ubuntu0.18.04.299.0+build2-0ubuntu0.18.04.2
mozillafirefox>= 0 < 99.0+build2-0ubuntu0.20.04.299.0+build2-0ubuntu0.20.04.2
mozillafirefox>= unspecified < 9999
mozillafirefox_esr< 91.891.8
mozillafirefox_esr>= unspecified < 91.891.8
mozillathunderbird< 91.891.8
mozillathunderbird>= 0 < 1:91.8.0-1~deb11u11:91.8.0-1~deb11u1
mozillathunderbird>= 0 < 1:91.8.0-11:91.8.0-1
mozillathunderbird>= 0 < 1:91.8.0-11:91.8.0-1
mozillathunderbird>= 0 < 1:91.8.0-11:91.8.0-1
mozillathunderbird>= 0 < 1:91.8.1+build1-0ubuntu0.18.04.11:91.8.1+build1-0ubuntu0.18.04.1
mozillathunderbird>= 0 < 1:91.8.1+build1-0ubuntu0.20.04.11:91.8.1+build1-0ubuntu0.20.04.1
mozillathunderbird>= unspecified < 91.891.8

CVSS provenance

nvdv3.16.5MEDIUMCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
osv6.5MEDIUM
vendor_debian6.5MEDIUM
vendor_redhat6.5MEDIUM
vendor_ubuntu6.5MEDIUM
Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.