Log in Start free

Vulnerability · Published Dec 22, 2022 · Assigned by mozilla

CVE-2022-1529

High 8.8

In plain English

A high-severity prototype pollution in Firefox from Mozilla. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 17.6% (higher than 97% of all known vulnerabilities). Fixed versions are available - upgrade the affected package.

Severity (CVSS 3.1)8.8High
Exploit odds (30 days)17.6%top 2.8% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known

Official description

An attacker could have sent a message to the parent process where the contents were used to double-index into a JavaScript object, leading to prototype pollution and ultimately attacker-controlled JavaScript executing in the privileged parent process. This vulnerability affects Firefox ESR < 91.9.1, Firefox < 100.0.2, Firefox for Android < 100.3.0, and Thunderbird < 91.9.1.

Affected packages & fixed versions

EcosystemPackageFixed inAdvisory
AlmaLinux:8firefox91.9.1-1.el8_6.almaALSA-2022:4776
AlmaLinux:8thunderbird91.9.1-1.el8_6.almaALSA-2022:4769
Alpine:v3.20firefox100.0.2-r0ALPINE-CVE-2022-1529
Alpine:v3.21firefox100.0.2-r0ALPINE-CVE-2022-1529
Alpine:v3.22firefox100.0.2-r0ALPINE-CVE-2022-1529
Alpine:v3.23firefox100.0.2-r0ALPINE-CVE-2022-1529
Alpine:v3.20firefox-esr91.9.1-r0ALPINE-CVE-2022-1529
Alpine:v3.21firefox-esr91.9.1-r0ALPINE-CVE-2022-1529
Alpine:v3.22firefox-esr91.9.1-r0ALPINE-CVE-2022-1529
Alpine:v3.23firefox-esr91.9.1-r0ALPINE-CVE-2022-1529
Alpine:v3.21librewolf100.0.2-r0ALPINE-CVE-2022-1529
Alpine:v3.22librewolf100.0.2-r0ALPINE-CVE-2022-1529
Alpine:v3.23librewolf100.0.2-r0ALPINE-CVE-2022-1529
Alpine:v3.24librewolf100.0.2-r0ALPINE-CVE-2022-1529
Alpine:v3.20thunderbird91.9.1-r0ALPINE-CVE-2022-1529
Alpine:v3.21thunderbird91.9.1-r0ALPINE-CVE-2022-1529
Alpine:v3.22thunderbird91.9.1-r0ALPINE-CVE-2022-1529
Alpine:v3.23thunderbird91.9.1-r0ALPINE-CVE-2022-1529
Debian:12firefox-esr91.9.1esr-1DEBIAN-CVE-2022-1529
Debian:13firefox-esr91.9.1esr-1DEBIAN-CVE-2022-1529
Debian:14firefox-esr91.9.1esr-1DEBIAN-CVE-2022-1529
Debian:12thunderbird1:91.10.0-1DEBIAN-CVE-2022-1529
Debian:13thunderbird1:91.10.0-1DEBIAN-CVE-2022-1529
Debian:14thunderbird1:91.10.0-1DEBIAN-CVE-2022-1529
Rocky Linux:8firefox0:91.9.1-1.el8_6RLSA-2022:4776
Rocky Linux:8thunderbird0:91.9.1-1.el8_6RLSA-2022:4769
Ubuntu:22.04:LTSthunderbird1:91.9.1+build1-0ubuntu0.22.04.1UBUNTU-CVE-2022-1529
Ubuntu:22.04:LTSthunderbird1:91.9.1+build1-0ubuntu0.22.04.1USN-5435-1

Affected products (as reported)

VendorProductVersions
Mozilla Firefox ESR unspecified – before 91.9.1
Mozilla Firefox unspecified – before 100.0.2
Mozilla Firefox for Android unspecified – before 100.3.0
Mozilla Thunderbird unspecified – before 91.9.1

Weakness: CWE-1321 · Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

References