CVE-2022-22741

Reference Links

• https://bugzilla.mozilla.org/show_bug.cgi?id=1740389
• https://www.mozilla.org/en-US/security/advisories/mfsa2022-02/
• https://www.mozilla.org/en-US/security/advisories/mfsa2022-01/
• https://www.mozilla.org/en-US/security/advisories/mfsa2022-03/
• https://www.mozilla.org/security/advisories/mfsa2022-01/
• https://www.mozilla.org/security/advisories/mfsa2022-02/
• https://www.mozilla.org/security/advisories/mfsa2022-03/

Parent vulnerabilities

(Appears in the following advisories)

• MFSA2022-02
• MFSA2022-03
• MFSA2022-01

Peer vulnerabilities

(Found alongside the following vulnerabilities)

• CVE-2022-22746
• CVE-2022-22743
• CVE-2022-22742
• CVE-2022-22741
• CVE-2022-22740
• CVE-2022-22738
• CVE-2022-22737
• CVE-2021-4140
• CVE-2022-22748
• CVE-2022-22745
• CVE-2022-22744
• CVE-2022-22747
• CVE-2022-22739
• CVE-2022-22751
• CVE-2022-22750
• CVE-2022-22749
• CVE-2022-22763
• CVE-2022-22736
• CVE-2022-22752

Frequently Asked Questions

• What is CVE-2022-22741?

  CVE-2022-22741 is a vulnerability in Firefox ESR < 91.5, Firefox < 96, and Thunderbird < 91.5 that allows a malicious user to resize a popup while requesting fullscreen access, causing the popup to become unable to leave fullscreen mode.

• Which software versions are affected by CVE-2022-22741?

  CVE-2022-22741 affects Firefox ESR versions prior to 91.5, Firefox versions prior to 96, and Thunderbird versions prior to 91.5.

• What is the severity of CVE-2022-22741?

  CVE-2022-22741 has a severity rating of high with a severity value of 7.

• How can I fix CVE-2022-22741?

  To fix CVE-2022-22741, update Firefox ESR to version 91.5 or later, update Firefox to version 96 or later, or update Thunderbird to version 91.5 or later.

• Where can I find more information about CVE-2022-22741?

  You can find more information about CVE-2022-22741 in the following references: [Bugzilla](https://bugzilla.mozilla.org/show_bug.cgi?id=1740389), [Mozilla Security Advisory MFSA2022-03](https://www.mozilla.org/en-US/security/advisories/mfsa2022-03/), [Mozilla Security Advisory MFSA2022-01](https://www.mozilla.org/en-US/security/advisories/mfsa2022-01/).