CVE-2022-1802

Reference Links

• https://bugzilla.mozilla.org/show_bug.cgi?id=1770137
• https://www.mozilla.org/en-US/security/advisories/mfsa2022-19/
• https://www.mozilla.org/security/advisories/mfsa2022-19/

Parent vulnerabilities

(Appears in the following advisories)

• MFSA2022-19

Peer vulnerabilities

(Found alongside the following vulnerabilities)

• CVE-2022-1802
• CVE-2022-1529

Frequently Asked Questions

• What is CVE-2022-1802?

  CVE-2022-1802 is a vulnerability that allows an attacker to execute malicious JavaScript code in a privileged context by corrupting the methods of an Array object in JavaScript through prototype pollution.

• Which software is affected by CVE-2022-1802?

  Mozilla Firefox ESR versions prior to 91.9.1, Mozilla Firefox versions prior to 100.0.2, Mozilla Thunderbird versions prior to 91.9.1, and Mozilla Firefox for Android versions prior to 100.3 are affected.

• What is the severity of CVE-2022-1802?

  CVE-2022-1802 has a severity score of 8.8, which is classified as critical.

• How can I fix CVE-2022-1802?

  To fix CVE-2022-1802, you should update your Mozilla Firefox, Mozilla Thunderbird, or Mozilla Firefox for Android to the corresponding patched versions (Firefox ESR 91.9.1, Firefox 100.0.2, Thunderbird 91.9.1, Firefox for Android 100.3).

• Where can I find more information about CVE-2022-1802?

  You can find more information about CVE-2022-1802 on the Mozilla Bugzilla page (https://bugzilla.mozilla.org/show_bug.cgi?id=1770137) and the Mozilla security advisories (https://www.mozilla.org/en-US/security/advisories/mfsa2022-19/ and https://www.mozilla.org/security/advisories/mfsa2022-19/).