CVEs published on December 22, 2022

105 vulnerabilities, ordered with the most urgent first.

9.6 Critical severity
Mozilla Firefox Use-After-Free Exploited
CVE-2022-26486Dec 22, 2022MozillaEPSS 2.36%
8.8 High severity
Mozilla Firefox Use-After-Free Exploited
CVE-2022-26485Dec 22, 2022MozillaEPSS 14.3%
8.8 High severity
Firefox ESR: Improperly Controlled Modification of Object Prototype Attributes
CVE-2022-1802Dec 22, 2022MozillaEPSS 28.5%
8.8 High severity
Firefox ESR: Improperly Controlled Modification of Object Prototype Attributes
CVE-2022-1529Dec 22, 2022MozillaEPSS 17.6%
8.8 High severity
Firefox: Improperly Controlled Modification of Object Prototype Attributes
CVE-2022-2200Dec 22, 2022MozillaEPSS 23.9%
9.8 Critical severity
Apache ShardingSphere-Proxy: Incomplete Cleanup
CVE-2022-45347Dec 22, 2022ApacheEPSS 1.48%
9.8 Critical severity
Thunderbird: Out-of-bounds Write
CVE-2022-29917Dec 22, 2022MozillaEPSS 1.05%
9.8 Critical severity
Thunderbird: Out-of-bounds Read
CVE-2022-31747Dec 22, 2022Mozilla
9.8 Critical severity
Firefox ESR: Use After Free
CVE-2022-45406Dec 22, 2022MozillaEPSS 1.07%
9.8 Critical severity
Firefox: Improper Restriction of Operations within the Bounds of a Memory Buffer
CVE-2022-31748Dec 22, 2022Mozilla
9.8 Critical severity
Firefox: Out-of-bounds Write
CVE-2022-34485Dec 22, 2022Mozilla
9.6 Critical severity
Firefox: Protection Mechanism Failure
CVE-2022-26384Dec 22, 2022Mozilla
9.6 Critical severity
Firefox: Protection Mechanism Failure
CVE-2022-22759Dec 22, 2022Mozilla
9.8 Critical severity
Thunderbird: Permissive Cross-domain Security Policy with Untrusted Domains
CVE-2022-31736Dec 22, 2022MozillaEPSS 1.11%
9.8 Critical severity
Thunderbird: Out-of-bounds Write
CVE-2022-31737Dec 22, 2022Mozilla
9.8 Critical severity
Firefox: Use After Free
CVE-2022-34470Dec 22, 2022MozillaEPSS 1.09%
9.8 Critical severity
Firefox: Use After Free
CVE-2022-46882Dec 22, 2022Mozilla
9.8 Critical severity
ASN.1 parsing of an indefinite SEQUENCE inside an indefinite GROUP could have resulted in the…
CVE-2022-34476Dec 22, 2022Mozilla
9.8 Critical severity
Firefox: Out-of-bounds Write
CVE-2022-36320Dec 22, 2022Mozilla
8.8 High severity
Thunderbird: Out-of-bounds Write
CVE-2022-28281Dec 22, 2022MozillaEPSS 2.78%
8.8 High severity
Firefox ESR: Improper Encoding or Escaping of Output
CVE-2022-22744Dec 22, 2022MozillaEPSS 1.37%
8.8 High severity
Firefox ESR: Out-of-bounds Write
CVE-2022-40962Dec 22, 2022MozillaEPSS 1.43%
8.8 High severity
Firefox ESR: Out-of-bounds Write
CVE-2022-22751Dec 22, 2022Mozilla
8.8 High severity
Firefox: Improper Control of Generation of Code
CVE-2022-22756Dec 22, 2022Mozilla
8.8 High severity
Firefox: Use After Free
CVE-2022-34484Dec 22, 2022MozillaEPSS 1%
8.8 High severity
Firefox ESR: Out-of-bounds Write
CVE-2022-38477Dec 22, 2022Mozilla
8.8 High severity
Thunderbird: Out-of-bounds Write
CVE-2022-38478Dec 22, 2022Mozilla
8.8 High severity
Firefox ESR: Improper Link Resolution Before File Access
CVE-2022-45412Dec 22, 2022Mozilla
8.8 High severity
Firefox: Improper Control of Generation of Code
CVE-2022-46874Dec 22, 2022Mozilla
8.8 High severity
Firefox: Out-of-bounds Write
CVE-2022-0511Dec 22, 2022Mozilla
8.8 High severity
Firefox: Out-of-bounds Write
CVE-2022-0843Dec 22, 2022Mozilla
8.8 High severity
Firefox: Out-of-bounds Write
CVE-2022-22752Dec 22, 2022Mozilla
8.8 High severity
Firefox: Out-of-bounds Write
CVE-2022-22764Dec 22, 2022Mozilla
8.8 High severity
Firefox ESR: Out-of-bounds Write
CVE-2022-2505Dec 22, 2022Mozilla
8.8 High severity
Firefox: Improper Encoding or Escaping of Output
CVE-2022-28284Dec 22, 2022Mozilla
8.8 High severity
Firefox: Out-of-bounds Write
CVE-2022-28288Dec 22, 2022Mozilla
8.8 High severity
Thunderbird: Out-of-bounds Write
CVE-2022-28289Dec 22, 2022Mozilla
8.8 High severity
Firefox: Out-of-bounds Write
CVE-2022-29918Dec 22, 2022Mozilla
8.8 High severity
Thunderbird: External Control of File Name or Path
CVE-2022-31739Dec 22, 2022Mozilla
8.8 High severity
Firefox: Unrestricted Upload of File with Dangerous Type
CVE-2022-34482Dec 22, 2022Mozilla
8.8 High severity
Firefox: Unrestricted Upload of File with Dangerous Type
CVE-2022-34483Dec 22, 2022Mozilla
8.8 High severity
Firefox: Out-of-bounds Write
CVE-2022-42932Dec 22, 2022Mozilla
8.8 High severity
Firefox ESR: Out-of-bounds Write
CVE-2022-45421Dec 22, 2022Mozilla
8.8 High severity
Firefox: Improper Neutralization of Special Elements in Output Used by a Downstream Component
CVE-2022-46873Dec 22, 2022Mozilla
8.8 High severity
Firefox: Out-of-bounds Write
CVE-2022-46878Dec 22, 2022Mozilla
8.8 High severity
Firefox: Out-of-bounds Write
CVE-2022-46879Dec 22, 2022Mozilla
8.8 High severity
Firefox: Out-of-bounds Write
CVE-2022-46881Dec 22, 2022Mozilla
8.8 High severity
Firefox: Out-of-bounds Write
CVE-2022-46883Dec 22, 2022Mozilla
8.8 High severity
Firefox: Out-of-bounds Write
CVE-2022-46885Dec 22, 2022Mozilla
8.8 High severity
Firefox: Cleartext Transmission of Sensitive Information
CVE-2022-22758Dec 22, 2022Mozilla
8.6 High severity
Firefox: Out-of-bounds Read
CVE-2022-46872Dec 22, 2022Mozilla
8.8 High severity
Firefox ESR: Out-of-bounds Write
CVE-2022-22738Dec 22, 2022MozillaEPSS 1.03%
8.8 High severity
Firefox ESR: Use After Free
CVE-2022-22740Dec 22, 2022MozillaEPSS 1.01%
8.8 High severity
Firefox: Use After Free
CVE-2022-26381Dec 22, 2022Mozilla
8.8 High severity
Thunderbird: Incorrect Default Permissions
CVE-2022-29909Dec 22, 2022Mozilla
8.8 High severity
Firefox: Inclusion of Functionality from Untrusted Control Sphere
CVE-2022-34468Dec 22, 2022Mozilla
8.8 High severity
Firefox: NULL Pointer Dereference
CVE-2022-42928Dec 22, 2022Mozilla
8.8 High severity
Thunderbird: Out-of-bounds Write
CVE-2022-0566Dec 22, 2022Mozilla
8.8 High severity
Firefox: Operation on a Resource after Expiration or Release
CVE-2022-22755Dec 22, 2022Mozilla
8.8 High severity
Firefox: Protection Mechanism Failure
CVE-2022-22761Dec 22, 2022Mozilla
8.8 High severity
Firefox: Concurrent Execution using Shared Resource with Improper Synchronization
CVE-2022-22763Dec 22, 2022Mozilla
8.8 High severity
Thunderbird: Improper Restriction of Operations within the Bounds of a Memory Buffer
CVE-2022-31740Dec 22, 2022Mozilla
8.8 High severity
Thunderbird: Use of Uninitialized Resource
CVE-2022-31741Dec 22, 2022Mozilla
8.8 High severity
Firefox: Access of Uninitialized Pointer
CVE-2022-34480Dec 22, 2022Mozilla
8.8 High severity
Firefox: Integer Overflow or Wraparound
CVE-2022-34481Dec 22, 2022Mozilla
8.8 High severity
Thunderbird: Improper Preservation of Permissions
CVE-2022-38473Dec 22, 2022Mozilla
8.8 High severity
Firefox ESR: Use After Free
CVE-2022-45409Dec 22, 2022Mozilla
8.1 High severity
Thunderbird: Improper Neutralization of Input During Web Page Generation
CVE-2022-3033Dec 22, 2022Mozilla
8.1 High severity
Thunderbird: Exposure of Sensitive Information to an Unauthorized Actor
CVE-2022-45414Dec 22, 2022Mozilla
8.1 High severity
Firefox: Improper Certificate Validation
CVE-2022-34469Dec 22, 2022Mozilla
7.8 High severity
Thunderbird: Incorrect Default Permissions
CVE-2022-3155Dec 22, 2022Mozilla
8.1 High severity
Firefox: Origin Validation Error
CVE-2022-42927Dec 22, 2022Mozilla
7.5 High severity
An Improper Input Validation vulnerability in the Routing Protocol Daemon (rpd) of Juniper…
CVE-2022-22184Dec 22, 2022Juniper Networks
7.5 High severity
Firefox: Time-of-check Time-of-use (TOCTOU) Race Condition
CVE-2022-26387Dec 22, 2022Mozilla
9.8 Critical severity
CodeIgniter4: Improper Authentication
CVE-2022-46170Dec 22, 2022Codeigniter4
7.8 High severity
Mozilla VPN: Unrestricted Upload of File with Dangerous Type
CVE-2022-0517Dec 22, 2022Mozilla
7.8 High severity
Firefox: Unrestricted Upload of File with Dangerous Type
CVE-2022-45415Dec 22, 2022Mozilla
7.1 High severity
Firefox: Time-of-check Time-of-use (TOCTOU) Race Condition
CVE-2022-22753Dec 22, 2022Mozilla
7.5 High severity
Firefox ESR: Use After Free
CVE-2022-38476Dec 22, 2022Mozilla
7.5 High severity
Firefox ESR: Concurrent Execution using Shared Resource with Improper Synchronization
CVE-2022-22737Dec 22, 2022Mozilla
7.5 High severity
Firefox: Observable Discrepancy
CVE-2022-34477Dec 22, 2022Mozilla
7.5 High severity
Firefox ESR: Improper Restriction of Rendered UI Layers or Frames
CVE-2022-36319Dec 22, 2022Mozilla
7.5 High severity
Firefox: Use After Free
CVE-2022-45407Dec 22, 2022Mozilla
7.5 High severity
Security Verify Governance, Identity Manager: Use of a Broken or Risky Cryptographic Algorithm
CVE-2022-22461Dec 22, 2022IBM
7.0 High severity
Firefox: Uncontrolled Search Path Element
CVE-2022-22736Dec 22, 2022Mozilla
9.8 Critical severity
OpenImageIO: Out-of-bounds Write
CVE-2022-41639Dec 22, 2022OpenImageIO ProjectEPSS 1.94%
9.8 Critical severity
OpenImageIO: Out-of-bounds Write
CVE-2022-38143Dec 22, 2022OpenImageIO ProjectEPSS 1.52%
7.1 High severity
Firefox: Concurrent Execution using Shared Resource with Improper Synchronization
CVE-2022-42930Dec 22, 2022Mozilla
9.8 Critical severity
OpenImageIO: Out-of-bounds Write
CVE-2022-41794Dec 22, 2022OpenImageIO ProjectEPSS 1.99%
9.8 Critical severity
OpenImageIO: Out-of-bounds Write
CVE-2022-41838Dec 22, 2022OpenImageIO ProjectEPSS 1.94%
9.8 Critical severity
OpenImageIO: Out-of-bounds Write
CVE-2022-41837Dec 22, 2022OpenImageIO ProjectEPSS 1.67%
9.1 Critical severity
OpenImageIO: Out-of-bounds Read
CVE-2022-41649Dec 22, 2022OpenImageIO ProjectEPSS 1.54%
8.8 High severity
Ayacms: Improper Control of Generation of Code
CVE-2022-46101Dec 22, 2022Ayacms ProjectEPSS 2.12%
7.6 High severity
node-jsonwebtoken: Improper Verification of Cryptographic Signature
CVE-2022-23540Dec 22, 2022Auth0
7.5 High severity
CodeIgniter4: Insufficient Verification of Data Authenticity
CVE-2022-23556Dec 22, 2022Codeigniter4
8.1 High severity
OpenImageIO: Heap-based Buffer Overflow
CVE-2022-43597Dec 22, 2022OpenImageIO ProjectEPSS 1.98%
8.1 High severity
OpenImageIO: Out-of-bounds Write
CVE-2022-43598Dec 22, 2022OpenImageIO ProjectEPSS 1.94%
8.1 High severity
OpenImageIO: Heap-based Buffer Overflow
CVE-2022-43599Dec 22, 2022OpenImageIO ProjectEPSS 2.1%
8.1 High severity
OpenImageIO: Heap-based Buffer Overflow
CVE-2022-43602Dec 22, 2022OpenImageIO ProjectEPSS 2.06%
8.1 High severity
OpenImageIO: Heap-based Buffer Overflow
CVE-2022-43600Dec 22, 2022OpenImageIO ProjectEPSS 1.8%
8.1 High severity
OpenImageIO: Heap-based Buffer Overflow
CVE-2022-43601Dec 22, 2022OpenImageIO ProjectEPSS 1.8%
8.1 High severity
OpenImageIO: Out-of-bounds Read
CVE-2022-41981Dec 22, 2022OpenImageIO ProjectEPSS 1.1%
7.5 High severity
Jeg Kit for Elementor – Powerful Addons for…: Authorization Bypass Through User-Controlled Key
CVE-2022-3805Dec 22, 2022JegthemeEPSS 1.69%
7.5 High severity
OpenImageIO: NULL Pointer Dereference
CVE-2022-41999Dec 22, 2022OpenImageIO ProjectEPSS 1.52%
7.5 High severity
OpenImageIO: Out-of-bounds Read
CVE-2022-41988Dec 22, 2022OpenImageIO ProjectEPSS 1.24%

CVEs published on December 22, 2022

Mozilla Firefox Use-After-Free Exploited

Mozilla Firefox Use-After-Free Exploited