CVE-2022-22741: High severity thunderbird vulnerability
When resizing a popup while requesting fullscreen access, the popup would have become unable to leave fullscreen mode.
Affected Software
Event History
Parent advisories
This vulnerability appears in the following advisories.
Peer vulnerabilities
Found alongside the following vulnerabilities.
Frequently Asked Questions
What is CVE-2022-22741?
CVE-2022-22741 is a vulnerability in Firefox ESR < 91.5, Firefox < 96, and Thunderbird < 91.5 that allows a malicious user to resize a popup while requesting fullscreen access, causing the popup to become unable to leave fullscreen mode.
Which software versions are affected by CVE-2022-22741?
CVE-2022-22741 affects Firefox ESR versions prior to 91.5, Firefox versions prior to 96, and Thunderbird versions prior to 91.5.
What is the severity of CVE-2022-22741?
CVE-2022-22741 has a severity rating of high with a severity value of 7.
How can I fix CVE-2022-22741?
To fix CVE-2022-22741, update Firefox ESR to version 91.5 or later, update Firefox to version 96 or later, or update Thunderbird to version 91.5 or later.
Where can I find more information about CVE-2022-22741?
You can find more information about CVE-2022-22741 in the following references: [Bugzilla](https://bugzilla.mozilla.org/show_bug.cgi?id=1740389), [Mozilla Security Advisory MFSA2022-03](https://www.mozilla.org/en-US/security/advisories/mfsa2022-03/), [Mozilla Security Advisory MFSA2022-01](https://www.mozilla.org/en-US/security/advisories/mfsa2022-01/).