CVE-2022-29914

Reference Links

• https://bugzilla.mozilla.org/show_bug.cgi?id=1746448
• https://www.mozilla.org/en-US/security/advisories/mfsa2022-17/
• https://www.mozilla.org/en-US/security/advisories/mfsa2022-16/
• https://www.mozilla.org/en-US/security/advisories/mfsa2022-18/
• https://www.mozilla.org/security/advisories/mfsa2022-16/
• https://www.mozilla.org/security/advisories/mfsa2022-17/
• https://www.mozilla.org/security/advisories/mfsa2022-18/

Parent vulnerabilities

(Appears in the following advisories)

• MFSA2022-18
• MFSA2022-16
• MFSA2022-17

Peer vulnerabilities

(Found alongside the following vulnerabilities)

• CVE-2022-1520
• CVE-2022-29914
• CVE-2022-29909
• CVE-2022-29916
• CVE-2022-29911
• CVE-2022-29912
• CVE-2022-29913
• CVE-2022-29917
• CVE-2022-29910
• CVE-2022-29915
• CVE-2022-29918

Frequently Asked Questions

• What is the severity of CVE-2022-29914?

  CVE-2022-29914 has a severity rating that allows for browser spoofing attacks by covering the fullscreen notification UI.

• How do I fix CVE-2022-29914?

  To fix CVE-2022-29914, update your Firefox, Firefox ESR, or Thunderbird to versions 91.9 or 100 as applicable.

• Which software is affected by CVE-2022-29914?

  CVE-2022-29914 affects Mozilla Firefox, Firefox ESR, and Thunderbird versions prior to 91.9 or 100.

• What type of attack does CVE-2022-29914 enable?

  CVE-2022-29914 enables browser spoofing attacks by allowing popups to obscure important user interface elements.

• When was CVE-2022-29914 disclosed?

  CVE-2022-29914 was publicly disclosed in 2022, leading to the issuance of security advisories by Mozilla.