CVE-2022-46872

Reference Links

• https://bugzilla.mozilla.org/show_bug.cgi?id=1799156
• https://www.mozilla.org/en-US/security/advisories/mfsa2022-53/
• https://www.mozilla.org/en-US/security/advisories/mfsa2022-51/
• https://www.mozilla.org/en-US/security/advisories/mfsa2022-52/
• https://security.gentoo.org/glsa/202305-06
• https://security.gentoo.org/glsa/202305-13
• https://www.mozilla.org/security/advisories/mfsa2022-51/
• https://www.mozilla.org/security/advisories/mfsa2022-52/
• https://www.mozilla.org/security/advisories/mfsa2022-53/

Parent vulnerabilities

(Appears in the following advisories)

• MFSA2022-53
• MFSA2022-52
• MFSA2022-51

Peer vulnerabilities

(Found alongside the following vulnerabilities)

• CVE-2022-46880
• CVE-2022-46872
• CVE-2022-46881
• CVE-2022-46875
• CVE-2022-46882
• CVE-2022-46878
• CVE-2022-46874
• CVE-2022-46871
• CVE-2022-46873
• CVE-2022-46877
• CVE-2022-46879

Frequently Asked Questions

• What is CVE-2022-46872?

  CVE-2022-46872 is a vulnerability that allows an attacker who compromised a content process to partially escape the sandbox and read arbitrary files via clipboard-related IPC messages.

• Which operating systems are affected by CVE-2022-46872?

  This vulnerability only affects Thunderbird for Linux. Other operating systems are unaffected.

• Which versions of Thunderbird and Firefox ESR are affected by CVE-2022-46872?

  Thunderbird versions up to and excluding 102.6 and Firefox ESR versions up to and excluding 102.6 are affected.

• Which versions of Firefox are affected by CVE-2022-46872?

  Firefox versions up to and excluding 108.0 are affected.

• What is the severity of CVE-2022-46872?

  CVE-2022-46872 has a severity rating of 8.6 (High).