CVE-2022-46875

CVSS v3.1 6.5 (Medium)

EPSS 0.15 % (52^th)

Affected Products 4

Advisories 12

The executable file warning was not presented when downloading .atloc and .ftploc files, which can run commands on a user's computer. <br>Note: This issue only affected Mac OS operating systems. Other operating systems are unaffected.. This vulnerability affects Firefox < 108, Firefox ESR < 102.6, and Thunderbird < 102.6.

Weaknesses

CWE-NVD-noinfo

CVE Status: PUBLISHED
CNA: Mozilla Corporation
Published Date: 2022-12-22 20:15:46
(21 months ago)
Updated Date: 2023-05-03 12:16:32
(16 months ago)

Affected Products

Apple

Macos

Mozilla

Firefox
Firefox Esr
Thunderbird

Configuration #1

AND

		CPE23	Up To
OR
	Mozilla Firefox prior 108.0 version	cpe:2.3:a:mozilla:firefox	< 108.0
OR
	Running on/with
	Mozilla Firefox Esr prior 102.6 version	cpe:2.3:a:mozilla:firefox_esr	< 102.6
OR
	Running on/with
	Mozilla Thunderbird prior 102.6 version	cpe:2.3:a:mozilla:thunderbird	< 102.6
OR
	Running on/with
	Apple Macos	cpe:2.3:o:apple:macos:-