First published: Tue Jan 11 2022(Updated: )
By generally accepting and passing resource handles across processes, a compromised content process might have confused higher privileged processes to interact with handles that the unprivileged process should not have access to.<br>*This bug only affects Firefox for Windows and MacOS. Other operating systems are unaffected.*. This vulnerability affects Firefox < 96.
Credit: security@mozilla.org
Affected Software | Affected Version | How to fix |
---|---|---|
Mozilla Firefox | <96 | 96 |
<96 | 96 | |
Mozilla Firefox | <96.0 | |
Apple macOS | ||
Microsoft Windows |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
(Found alongside the following vulnerabilities)
CVE-2022-22750 has been classified as a high severity vulnerability.
To fix CVE-2022-22750, update Mozilla Firefox to version 96 or later.
CVE-2022-22750 affects Firefox on Windows and MacOS platforms.
CVE-2022-22750 can allow a compromised content process to interact with privileged handles, potentially leading to unauthorized access or crashes.
Yes, CVE-2022-22750 is patched in Firefox version 96.