CVE-2022-42927

Reference Links

• https://bugzilla.mozilla.org/show_bug.cgi?id=1789128
• https://www.mozilla.org/en-US/security/advisories/mfsa2022-44/
• https://www.mozilla.org/en-US/security/advisories/mfsa2022-45/
• https://www.mozilla.org/en-US/security/advisories/mfsa2022-46/
• https://www.mozilla.org/security/advisories/mfsa2022-44/
• https://www.mozilla.org/security/advisories/mfsa2022-45/
• https://www.mozilla.org/security/advisories/mfsa2022-46/

Parent vulnerabilities

(Appears in the following advisories)

• MFSA2022-45
• MFSA2022-46
• MFSA2022-44

Peer vulnerabilities

(Found alongside the following vulnerabilities)

• CVE-2022-42927
• CVE-2022-42928
• CVE-2022-42929
• CVE-2022-42932
• CVE-2022-46881
• CVE-2022-42930
• CVE-2022-42931
• CVE-2022-46885
• CVE-2022-46884

Frequently Asked Questions

• What is the vulnerability ID of this security issue?

  The vulnerability ID is CVE-2022-42927.

• What is the severity rating of CVE-2022-42927?

  CVE-2022-42927 has a severity rating of 8.1 (high).

• Which software versions are affected by CVE-2022-42927?

  Mozilla Firefox versions before 106, Mozilla Firefox ESR versions before 102.4, and Mozilla Thunderbird versions before 102.4 are affected by CVE-2022-42927.

• How can CVE-2022-42927 be exploited?

  CVE-2022-42927 can be exploited by violating the same-origin policy and stealing cross-origin URL entries, leaking the result of a redirect via performance.getEntries().

• Are there any references or additional information available for CVE-2022-42927?

  Yes, for more information on CVE-2022-42927, you can refer to the following sources: [Mozilla Bugzilla](https://bugzilla.mozilla.org/show_bug.cgi?id=1789128), [Mozilla Security Advisories](https://www.mozilla.org/en-US/security/advisories/mfsa2022-44/).