CVE-2022-46882

CVSS v3.1 9.8 (Critical)

EPSS 0.49 % (77^th)

Affected Products 3

Advisories 33

A use-after-free in WebGL extensions could have led to a potentially exploitable crash. This vulnerability affects Firefox < 107, Firefox ESR < 102.6, and Thunderbird < 102.6.

Weaknesses

CWE-416: Use After Free

CVE Status: PUBLISHED
CNA: Mozilla Corporation
Published Date: 2022-12-22 20:15:47
(21 months ago)
Updated Date: 2023-05-03 12:16:38
(16 months ago)

Affected Products

Mozilla

Firefox
Firefox Esr
Thunderbird

Configuration #1

	CPE23	Up To
Mozilla Firefox prior 107.0 version	cpe:2.3:a:mozilla:firefox	< 107.0
Mozilla Firefox Esr prior 102.6 version	cpe:2.3:a:mozilla:firefox_esr	< 102.6
Mozilla Thunderbird prior 102.6 version	cpe:2.3:a:mozilla:thunderbird	< 102.6