CVE-2022-26386

CVSS v3.1 6.5 (Medium)

EPSS 0.11 % (46^th)

Affected Products 4

Advisories 26

Previously Firefox for macOS and Linux would download temporary files to a user-specific directory in <code>/tmp</code>, but this behavior was changed to download them to <code>/tmp</code> where they could be affected by other local users. This behavior was reverted to the original, user-specific directory. <br>This bug only affects Firefox for macOS and Linux. Other operating systems are unaffected.. This vulnerability affects Firefox ESR < 91.7 and Thunderbird < 91.7.

Weaknesses

CWE-NVD-noinfo

CVE Status: PUBLISHED
CNA: Mozilla Corporation
Published Date: 2022-12-22 20:15:22
(21 months ago)
Updated Date: 2023-01-23 13:53:24
(20 months ago)

Affected Products

Apple

Macos

Linux

Linux Kernel

Mozilla

Configuration #1

AND

		CPE23	Up To
OR
	Mozilla Firefox Esr prior 91.7 version	cpe:2.3:a:mozilla:firefox_esr	< 91.7
OR
	Running on/with
	Mozilla Thunderbird prior 91.7 version	cpe:2.3:a:mozilla:thunderbird	< 91.7
OR
	Running on/with
	Apple Macos	cpe:2.3:o:apple:macos:-
OR
	Running on/with
	Linux Kernel	cpe:2.3:o:linux:linux_kernel:-