CVE-2022-1529

Reference Links

• https://bugzilla.mozilla.org/show_bug.cgi?id=1770048
• https://www.mozilla.org/en-US/security/advisories/mfsa2022-19/
• https://www.mozilla.org/security/advisories/mfsa2022-19/

Parent vulnerabilities

(Appears in the following advisories)

• MFSA2022-19

Peer vulnerabilities

(Found alongside the following vulnerabilities)

• CVE-2022-1802
• CVE-2022-1529

Frequently Asked Questions

• What is CVE-2022-1529?

  CVE-2022-1529 is a vulnerability that allows an attacker to execute attacker-controlled JavaScript in the privileged parent process of Firefox ESR < 91.9.1.

• How does CVE-2022-1529 work?

  CVE-2022-1529 works by allowing an attacker to send a message to the parent process and use the contents to double-index into a JavaScript object, leading to prototype pollution.

• Which software versions are affected by CVE-2022-1529?

  CVE-2022-1529 affects Firefox ESR versions < 91.9.1 and Thunderbird versions < 91.9.1.

• What is the severity of CVE-2022-1529?

  CVE-2022-1529 is classified as a critical vulnerability with a severity score of 8.8.

• How can I fix CVE-2022-1529?

  To fix CVE-2022-1529, it is recommended to update Firefox ESR to version 91.9.1 or later or Thunderbird to version 91.9.1 or later.