CVE-2022-42930: Race Condition
If two Workers were simultaneously initializing their CacheStorage, a data race could have occurred in the ThirdPartyUtil component. This vulnerability affects Firefox < 106.
Other sources
If two Workers were simultaneously initializing their CacheStorage, a data race could have occurred in the ThirdPartyUtil component.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
Firefoxto a version that resolves this vulnerability.Fixed in 106 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 106
Event History
Peer vulnerabilities
Found alongside the following vulnerabilities.
Frequently Asked Questions
What is the vulnerability ID for this issue?
The vulnerability ID for this issue is CVE-2022-42930.
What is the affected software?
The affected software is Mozilla Firefox version up to exclusive 106.
What is the severity of CVE-2022-42930?
The severity of CVE-2022-42930 is high, with a CVSS score of 7.1.
How can this vulnerability be exploited?
This vulnerability can be exploited if two Workers simultaneously initialize their CacheStorage, leading to a data race in the ThirdPartyUtil component.
Where can I find more information about CVE-2022-42930?
More information about CVE-2022-42930 can be found on the Mozilla bugzilla and security advisories pages.