CVE-2022-22746

CVSS v3.1 5.9 (Medium)

EPSS 0.14 % (51^th)

Affected Products 4

Advisories 10

A race condition could have allowed bypassing the fullscreen notification which could have lead to a fullscreen window spoof being unnoticed.<br>This bug only affects Firefox for Windows. Other operating systems are unaffected.. This vulnerability affects Firefox ESR < 91.5, Firefox < 96, and Thunderbird < 91.5.

Weaknesses

CWE-362: Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')

CVE Status: PUBLISHED
CNA: Mozilla Corporation
Published Date: 2022-12-22 20:15:15
(21 months ago)
Updated Date: 2022-12-31 04:02:36
(20 months ago)

Affected Products

Microsoft

Windows

Mozilla

Configuration #1

AND

		CPE23	Up To
OR
	Mozilla Firefox prior 96.0 version	cpe:2.3:a:mozilla:firefox	< 96.0
OR
	Running on/with
	Mozilla Firefox Esr prior 91.5 version	cpe:2.3:a:mozilla:firefox_esr	< 91.5
OR
	Running on/with
	Mozilla Thunderbird prior 91.5 version	cpe:2.3:a:mozilla:thunderbird	< 91.5
OR
	Running on/with
	Microsoft Windows	cpe:2.3:o:microsoft:windows:-