CVE-2022-29909

Reference Links

• https://bugzilla.mozilla.org/show_bug.cgi?id=1755081
• https://www.mozilla.org/en-US/security/advisories/mfsa2022-17/
• https://www.mozilla.org/en-US/security/advisories/mfsa2022-16/
• https://www.mozilla.org/en-US/security/advisories/mfsa2022-18/
• https://www.mozilla.org/security/advisories/mfsa2022-16/
• https://www.mozilla.org/security/advisories/mfsa2022-17/
• https://www.mozilla.org/security/advisories/mfsa2022-18/

Parent vulnerabilities

(Appears in the following advisories)

• MFSA2022-18
• MFSA2022-16
• MFSA2022-17

Peer vulnerabilities

(Found alongside the following vulnerabilities)

• CVE-2022-1520
• CVE-2022-29914
• CVE-2022-29909
• CVE-2022-29916
• CVE-2022-29911
• CVE-2022-29912
• CVE-2022-29913
• CVE-2022-29917
• CVE-2022-29910
• CVE-2022-29915
• CVE-2022-29918

Frequently Asked Questions

• What is the severity of CVE-2022-29909?

  CVE-2022-29909 is considered to have high severity due to its potential to allow unauthorized permission inheritance in cross-origin contexts.

• How do I fix CVE-2022-29909?

  To mitigate CVE-2022-29909, update your Mozilla Firefox or Thunderbird to versions beyond 91.9 for ESR and 100 for standard releases.

• What products are affected by CVE-2022-29909?

  CVE-2022-29909 affects Mozilla Firefox up to version 100, Mozilla Firefox ESR up to version 91.9, and Mozilla Thunderbird up to version 91.9.

• What kind of security risk does CVE-2022-29909 pose?

  CVE-2022-29909 poses a security risk by potentially allowing documents in deeply-nested cross-origin browsing contexts to inherit permissions without prompts.

• Can I check if my current Firefox version is vulnerable to CVE-2022-29909?

  Yes, you can check your Firefox version under the 'About' section, and if it is below version 100, it is vulnerable to CVE-2022-29909.