CVE-2022-22746: Race Condition
A race condition could have allowed bypassing the fullscreen notification which could have lead to a fullscreen window spoof being unnoticed.<br>This bug only affects Firefox for Windows. Other operating systems are unaffected.. This vulnerability affects Firefox ESR < 91.5, Firefox < 96, and Thunderbird < 91.5.
Other sources
A race condition could have allowed bypassing the fullscreen notification which could have lead to a fullscreen window spoof being unnoticed.This bug only affects Firefox for Windows. Other operating systems are unaffected.
— Mozilla
A race condition could have allowed bypassing the fullscreen notification which could have lead to a fullscreen window spoof being unnoticed.This bug only affects Thunderbird for Windows. Other operating systems are unaffected.
Affected Software
Event History
Parent advisories
This vulnerability appears in the following advisories.
Peer vulnerabilities
Found alongside the following vulnerabilities.
Frequently Asked Questions
What is the severity of CVE-2022-22746?
The severity of CVE-2022-22746 is high, with a severity value of 7.
Which operating systems are affected by CVE-2022-22746?
Only Thunderbird for Windows is affected. Other operating systems are unaffected.
How can CVE-2022-22746 be exploited?
CVE-2022-22746 can be exploited through a race condition that allows bypassing the fullscreen notification and spoofing a fullscreen window.
How can I fix CVE-2022-22746?
To fix CVE-2022-22746, update Thunderbird for Windows to version 91.5 or higher.
Where can I find more information about CVE-2022-22746?
You can find more information about CVE-2022-22746 on the Mozilla Bugzilla page (https://bugzilla.mozilla.org/show_bug.cgi?id=1735071) and the Mozilla security advisories (https://www.mozilla.org/en-US/security/advisories/mfsa2022-02/ and https://www.mozilla.org/en-US/security/advisories/mfsa2022-03/).