CVE-2022-1802: High severity firefox vulnerability
If an attacker was able to corrupt the methods of an Array object in JavaScript via prototype pollution, they could have achieved execution of attacker-controlled JavaScript code in a privileged context.
Affected Software
Event History
Frequently Asked Questions
What is CVE-2022-1802?
CVE-2022-1802 is a vulnerability that allows an attacker to execute malicious JavaScript code in a privileged context by corrupting the methods of an Array object in JavaScript through prototype pollution.
Which software is affected by CVE-2022-1802?
Mozilla Firefox ESR versions prior to 91.9.1, Mozilla Firefox versions prior to 100.0.2, Mozilla Thunderbird versions prior to 91.9.1, and Mozilla Firefox for Android versions prior to 100.3 are affected.
What is the severity of CVE-2022-1802?
CVE-2022-1802 has a severity score of 8.8, which is classified as critical.
How can I fix CVE-2022-1802?
To fix CVE-2022-1802, you should update your Mozilla Firefox, Mozilla Thunderbird, or Mozilla Firefox for Android to the corresponding patched versions (Firefox ESR 91.9.1, Firefox 100.0.2, Thunderbird 91.9.1, Firefox for Android 100.3).
Where can I find more information about CVE-2022-1802?
You can find more information about CVE-2022-1802 on the Mozilla Bugzilla page (https://bugzilla.mozilla.org/show_bug.cgi?id=1770137) and the Mozilla security advisories (https://www.mozilla.org/en-US/security/advisories/mfsa2022-19/ and https://www.mozilla.org/security/advisories/mfsa2022-19/).