Every CVE Search/ Get API key

CVE-2022-22747

After accepting an untrusted certificate, handling an empty pkcs7 sequence as part of the...

6.5 MediumFix available

After accepting an untrusted certificate, handling an empty pkcs7 sequence as part of the certificate data could have lead to a crash. This crash is believed to be unexploitable. This vulnerability affects Firefox ESR < 91.5, Firefox < 96, and Thunderbird < 91.5.

Attack profile

How easy it is to exploit

Attack vector
Network
Complexity
Low
Privileges needed
None
User interaction
Required

What an attacker can affect

Confidentiality
None
Integrity
None
Availability
High

Exploit likelihood

0.67%Down 0.3 points since Dec 23, 2022
90%50%10%1%

What each source reports

NVD Score used 6.5

After accepting an untrusted certificate, handling an empty pkcs7 sequence as part of the certificate data could have lead to a crash. This crash is believed to be unexploitable. This vulnerability affects Firefox ESR < 91.5, Firefox < 96, and Thunderbird < 91.5.

Record
CVE-2022-22747
CVSS 3.1
6.5 MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Weakness
CWE-295
Updated
2026-11-02
CVE List 6.5

After accepting an untrusted certificate, handling an empty pkcs7 sequence as part of the certificate data could have lead to a crash. This crash is believed to be unexploitable. This vulnerability affects Firefox ESR < 91.5, Firefox < 96, and Thunderbird < 91.5.

Record
CVE-2022-22747
CVSS 3.1
6.5 MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Weakness
CWE-295
Updated
2026-11-02
EUVDEUVD-2022-27890 6.5

After accepting an untrusted certificate, handling an empty pkcs7 sequence as part of the certificate data could have lead to a crash. This crash is believed to be unexploitable. This vulnerability affects Firefox ESR < 91.5, Firefox < 96, and Thunderbird < 91.5.

Record
EUVD-2022-27890
CVSS 3.1
6.5 MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Updated
2026-11-02
GitHub AdvisoriesGHSA-7h6j-6653-fx8c 6.5

After accepting an untrusted certificate, handling an empty pkcs7 sequence as part of the...

After accepting an untrusted certificate, handling an empty pkcs7 sequence as part of the certificate data could have lead to a crash. This crash is believed to be unexploitable. This vulnerability affects Firefox ESR < 91.5, Firefox < 96, and Thunderbird < 91.5.

Record
GHSA-7h6j-6653-fx8c
CVSS 3.1
6.5 MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Weakness
CWE-295
Updated
2026-11-02
OSVALPINE-CVE-2022-22747 6.5

After accepting an untrusted certificate, handling an empty pkcs7 sequence as part of the certificate data could have lead to a crash. This crash is believed to be unexploitable. This vulnerability affects Firefox ESR < 91.5, Firefox < 96, and Thunderbird < 91.5.

Record
ALPINE-CVE-2022-22747
CVSS 3.1
6.5 MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Updated
2026-11-03
OSV 6.5

After accepting an untrusted certificate, handling an empty pkcs7 sequence as part of the certificate data could have lead to a crash. This crash is believed to be unexploitable. This vulnerability affects Firefox ESR < 91.5, Firefox < 96, and Thunderbird < 91.5.

Record
CVE-2022-22747
CVSS 3.1
6.5 MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Updated
2026-11-02
Show 37 moreShow less
OSVDEBIAN-CVE-2022-22747 6.5

After accepting an untrusted certificate, handling an empty pkcs7 sequence as part of the certificate data could have lead to a crash. This crash is believed to be unexploitable. This vulnerability affects Firefox ESR < 91.5, Firefox < 96, and Thunderbird < 91.5.

Record
DEBIAN-CVE-2022-22747
CVSS 3.1
6.5 MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Updated
2026-11-03
OSVOESA-2023-1673 10.0

firefox security update

Mozilla Firefox is a standalone web browser, designed for standards compliance and performance. Its functionality can be enhanced via a plethora of extensions.

Mozilla Firefox is an open-source web browser, designed for standards compliance, performance and portability.

Security Fix(es):

Mozilla developers reported memory safety bugs present in Firefox for Android 79. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Firefox < 80, Firefox ESR < 78.2, Thunderbird < 78.2, and Firefox for Android < 80.(CVE-2020-15670)

Mozilla developers reported memory safety bugs present in Firefox 80 and Firefox ESR 78.2. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Firefox < 81, Thunderbird < 78.3, and Firefox ESR < 78.3.(CVE-2020-15673)

Mozilla developers reported memory safety bugs present in Firefox 80. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Firefox < 81.(CVE-2020-15674)

When processing surfaces, the lifetime may outlive a persistent buffer leading to memory corruption and a potentially exploitable crash. This vulnerability affects Firefox < 81.(CVE-2020-15675)

If a valid external protocol handler was referenced in an image tag, the resulting broken image size could be distinguished from a broken image size of a non-existent protocol handler. This allowed an attacker to successfully probe whether an external protocol handler was registered. This vulnerability affects Firefox < 82.(CVE-2020-15680)

When multiple WASM threads had a reference to a module, and were looking up exported functions, one WASM thread could have overwritten another's entry in a shared stub table, resulting in a potentially exploitable crash. This vulnerability affects Firefox < 82.(CVE-2020-15681)

When a link to an external protocol was clicked, a prompt was presented that allowed the user to choose what application to open it in. An attacker could induce that prompt to be associated with an origin they didn't control, resulting in a spoofing attack. This was fixed by changing external protocol prompts to be tab-modal while also ensuring they could not be incorrectly associated with a different origin. This vulnerability affects Firefox < 82.(CVE-2020-15682)

Mozilla developers and community members reported memory safety bugs present in Firefox 81 and Firefox ESR 78.3. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Firefox ESR < 78.4, Firefox < 82, and Thunderbird < 78.4.(CVE-2020-15683)

Mozilla developers reported memory safety bugs present in Firefox 81. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Firefox < 82.(CVE-2020-15684)

Side-channel information leakage in graphics in Google Chrome prior to 87.0.4280.66 allowed a remote attacker to leak cross-origin data via a crafted HTML page.(CVE-2020-16012)

Use after free in WebRTC in Google Chrome prior to 88.0.4324.96 allowed a remote attacker to potentially exploit heap corruption via a crafted SCTP packet.(CVE-2020-16044)

In certain circumstances, the MCallGetProperty opcode can be emitted with unmet assumptions resulting in an exploitable use-after-free condition. This vulnerability affects Firefox < 82.0.3, Firefox ESR < 78.4.1, and Thunderbird < 78.4.2.(CVE-2020-26950)

(CVE-2020-26951)

(CVE-2020-26953) …

Record
OESA-2023-1673
CVSS 3.1
10.0 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
Updated
2026-11-02
OSVOESA-2023-1674 10.0

firefox security update

Mozilla Firefox is a standalone web browser, designed for standards compliance and performance. Its functionality can be enhanced via a plethora of extensions.

Mozilla Firefox is an open-source web browser, designed for standards compliance, performance and portability.

Security Fix(es):

Mozilla developers reported memory safety bugs present in Firefox for Android 79. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Firefox < 80, Firefox ESR < 78.2, Thunderbird < 78.2, and Firefox for Android < 80.(CVE-2020-15670)

Mozilla developers reported memory safety bugs present in Firefox 80 and Firefox ESR 78.2. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Firefox < 81, Thunderbird < 78.3, and Firefox ESR < 78.3.(CVE-2020-15673)

Mozilla developers reported memory safety bugs present in Firefox 80. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Firefox < 81.(CVE-2020-15674)

When processing surfaces, the lifetime may outlive a persistent buffer leading to memory corruption and a potentially exploitable crash. This vulnerability affects Firefox < 81.(CVE-2020-15675)

If a valid external protocol handler was referenced in an image tag, the resulting broken image size could be distinguished from a broken image size of a non-existent protocol handler. This allowed an attacker to successfully probe whether an external protocol handler was registered. This vulnerability affects Firefox < 82.(CVE-2020-15680)

When multiple WASM threads had a reference to a module, and were looking up exported functions, one WASM thread could have overwritten another's entry in a shared stub table, resulting in a potentially exploitable crash. This vulnerability affects Firefox < 82.(CVE-2020-15681)

When a link to an external protocol was clicked, a prompt was presented that allowed the user to choose what application to open it in. An attacker could induce that prompt to be associated with an origin they didn't control, resulting in a spoofing attack. This was fixed by changing external protocol prompts to be tab-modal while also ensuring they could not be incorrectly associated with a different origin. This vulnerability affects Firefox < 82.(CVE-2020-15682)

Mozilla developers and community members reported memory safety bugs present in Firefox 81 and Firefox ESR 78.3. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Firefox ESR < 78.4, Firefox < 82, and Thunderbird < 78.4.(CVE-2020-15683)

Mozilla developers reported memory safety bugs present in Firefox 81. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Firefox < 82.(CVE-2020-15684)

Side-channel information leakage in graphics in Google Chrome prior to 87.0.4280.66 allowed a remote attacker to leak cross-origin data via a crafted HTML page.(CVE-2020-16012)

Use after free in WebRTC in Google Chrome prior to 88.0.4324.96 allowed a remote attacker to potentially exploit heap corruption via a crafted SCTP packet.(CVE-2020-16044)

In certain circumstances, the MCallGetProperty opcode can be emitted with unmet assumptions resulting in an exploitable use-after-free condition. This vulnerability affects Firefox < 82.0.3, Firefox ESR < 78.4.1, and Thunderbird < 78.4.2.(CVE-2020-26950)

(CVE-2020-26951)

(CVE-2020-26953) …

Record
OESA-2023-1674
CVSS 3.1
10.0 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
Updated
2026-11-02
OSVOESA-2025-1549 6.5

nss security update

Network Security Services (NSS) is a set of libraries designed to support cross-platform development of security-enabled client and server applications. Applications built with NSS can support SSL v2 and v3, TLS, PKCS #5, PKCS #7, PKCS #11, PKCS #12, S/MIME, X.509 v3 certificates, and other security standards.

Security Fix(es):

After accepting an untrusted certificate, handling an empty pkcs7 sequence as part of the certificate data could have lead to a crash. This crash is believed to be unexploitable. This vulnerability affects Firefox ESR < 91.5, Firefox < 96, and Thunderbird < 91.5.(CVE-2022-22747)

Record
OESA-2025-1549
CVSS 3.1
6.5 MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVOESA-2025-1582 6.5

nss security update

Network Security Services (NSS) is a set of libraries designed to support cross-platform development of security-enabled client and server applications. Applications built with NSS can support SSL v2 and v3, TLS, PKCS #5, PKCS #7, PKCS #11, PKCS #12, S/MIME, X.509 v3 certificates, and other security standards.

Security Fix(es):

After accepting an untrusted certificate, handling an empty pkcs7 sequence as part of the certificate data could have lead to a crash. This crash is believed to be unexploitable. This vulnerability affects Firefox ESR < 91.5, Firefox < 96, and Thunderbird < 91.5.(CVE-2022-22747)

Record
OESA-2025-1582
CVSS 3.1
6.5 MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVOESA-2025-1583 6.5

nss security update

Network Security Services (NSS) is a set of libraries designed to support cross-platform development of security-enabled client and server applications. Applications built with NSS can support SSL v2 and v3, TLS, PKCS #5, PKCS #7, PKCS #11, PKCS #12, S/MIME, X.509 v3 certificates, and other security standards.

Security Fix(es):

After accepting an untrusted certificate, handling an empty pkcs7 sequence as part of the certificate data could have lead to a crash. This crash is believed to be unexploitable. This vulnerability affects Firefox ESR < 91.5, Firefox < 96, and Thunderbird < 91.5.(CVE-2022-22747)

Record
OESA-2025-1583
CVSS 3.1
6.5 MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVRHSA-2022:0123 9.6

Red Hat Security Advisory: thunderbird security update

Record
RHSA-2022:0123
CVSS 3.1
9.6 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2022:0124 9.6

Red Hat Security Advisory: firefox security update

Record
RHSA-2022:0124
CVSS 3.1
9.6 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2022:0125 9.6

Red Hat Security Advisory: firefox security update

Record
RHSA-2022:0125
CVSS 3.1
9.6 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2022:0126 9.6

Red Hat Security Advisory: firefox security update

Record
RHSA-2022:0126
CVSS 3.1
9.6 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2022:0127 9.6

Red Hat Security Advisory: thunderbird security update

Record
RHSA-2022:0127
CVSS 3.1
9.6 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2022:0128 9.6

Red Hat Security Advisory: thunderbird security update

Record
RHSA-2022:0128
CVSS 3.1
9.6 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2022:0129 9.6

Red Hat Security Advisory: thunderbird security update

Record
RHSA-2022:0129
CVSS 3.1
9.6 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2022:0130 9.6

Red Hat Security Advisory: firefox security update

Record
RHSA-2022:0130
CVSS 3.1
9.6 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2022:0131 9.6

Red Hat Security Advisory: thunderbird security update

Record
RHSA-2022:0131
CVSS 3.1
9.6 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2022:0132 9.6

Red Hat Security Advisory: firefox security update

Record
RHSA-2022:0132
CVSS 3.1
9.6 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H
Updated
2026-11-02
OSVRLSA-2022:0129 9.6

Important: thunderbird security update

Mozilla Thunderbird is a standalone mail and newsgroup client.

This update upgrades Thunderbird to version 91.5.0.

Security Fix(es):

  • Mozilla: Iframe sandbox bypass with XSLT (CVE-2021-4140)

  • Mozilla: Race condition when playing audio files (CVE-2022-22737)

  • Mozilla: Heap-buffer-overflow in blendGaussianBlur (CVE-2022-22738)

  • Mozilla: Use-after-free of ChannelEventQueue::mOwner (CVE-2022-22740)

  • Mozilla: Browser window spoof using fullscreen mode (CVE-2022-22741)

  • Mozilla: Out-of-bounds memory access when inserting text in edit mode (CVE-2022-22742)

  • Mozilla: Browser window spoof using fullscreen mode (CVE-2022-22743)

  • Mozilla: Memory safety bugs fixed in Firefox 96 and Firefox ESR 91.5 (CVE-2022-22751)

  • Mozilla: Leaking cross-origin URLs through securitypolicyviolation event (CVE-2022-22745)

  • Mozilla: Spoofed origin on external protocol launch dialog (CVE-2022-22748)

  • Mozilla: Missing throttling on external protocol launch dialog (CVE-2022-22739)

  • Mozilla: Crash when handling empty pkcs7 sequence (CVE-2022-22747)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
RLSA-2022:0129
CVSS 3.1
9.6 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H
Updated
2026-11-02
OSVRLSA-2022:0130 9.6

Important: firefox security update

Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability.

This update upgrades Firefox to version 91.5.0 ESR.

Security Fix(es):

  • Mozilla: Iframe sandbox bypass with XSLT (CVE-2021-4140)

  • Mozilla: Race condition when playing audio files (CVE-2022-22737)

  • Mozilla: Heap-buffer-overflow in blendGaussianBlur (CVE-2022-22738)

  • Mozilla: Use-after-free of ChannelEventQueue::mOwner (CVE-2022-22740)

  • Mozilla: Browser window spoof using fullscreen mode (CVE-2022-22741)

  • Mozilla: Out-of-bounds memory access when inserting text in edit mode (CVE-2022-22742)

  • Mozilla: Browser window spoof using fullscreen mode (CVE-2022-22743)

  • Mozilla: Memory safety bugs fixed in Firefox 96 and Firefox ESR 91.5 (CVE-2022-22751)

  • Mozilla: Leaking cross-origin URLs through securitypolicyviolation event (CVE-2022-22745)

  • Mozilla: Spoofed origin on external protocol launch dialog (CVE-2022-22748)

  • Mozilla: Missing throttling on external protocol launch dialog (CVE-2022-22739)

  • Mozilla: Crash when handling empty pkcs7 sequence (CVE-2022-22747)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
RLSA-2022:0130
CVSS 3.1
9.6 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H
Updated
2026-11-02
OSVUBUNTU-CVE-2022-22747 6.5

After accepting an untrusted certificate, handling an empty pkcs7 sequence as part of the certificate data could have lead to a crash. This crash is believed to be unexploitable. This vulnerability affects Firefox ESR < 91.5, Firefox < 96, and Thunderbird < 91.5.

Record
UBUNTU-CVE-2022-22747
CVSS 3.1
6.5 MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVALSA-2022:0129 No score

Important: thunderbird security update

Mozilla Thunderbird is a standalone mail and newsgroup client.

This update upgrades Thunderbird to version 91.5.0.

Security Fix(es):

  • Mozilla: Iframe sandbox bypass with XSLT (CVE-2021-4140)

  • Mozilla: Race condition when playing audio files (CVE-2022-22737)

  • Mozilla: Heap-buffer-overflow in blendGaussianBlur (CVE-2022-22738)

  • Mozilla: Use-after-free of ChannelEventQueue::mOwner (CVE-2022-22740)

  • Mozilla: Browser window spoof using fullscreen mode (CVE-2022-22741)

  • Mozilla: Out-of-bounds memory access when inserting text in edit mode (CVE-2022-22742)

  • Mozilla: Browser window spoof using fullscreen mode (CVE-2022-22743)

  • Mozilla: Memory safety bugs fixed in Firefox 96 and Firefox ESR 91.5 (CVE-2022-22751)

  • Mozilla: Leaking cross-origin URLs through securitypolicyviolation event (CVE-2022-22745)

  • Mozilla: Spoofed origin on external protocol launch dialog (CVE-2022-22748)

  • Mozilla: Missing throttling on external protocol launch dialog (CVE-2022-22739)

  • Mozilla: Crash when handling empty pkcs7 sequence (CVE-2022-22747)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
ALSA-2022:0129
Updated
2026-11-02
OSVALSA-2022:0130 No score

Important: firefox security update

Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability.

This update upgrades Firefox to version 91.5.0 ESR.

Security Fix(es):

  • Mozilla: Iframe sandbox bypass with XSLT (CVE-2021-4140)

  • Mozilla: Race condition when playing audio files (CVE-2022-22737)

  • Mozilla: Heap-buffer-overflow in blendGaussianBlur (CVE-2022-22738)

  • Mozilla: Use-after-free of ChannelEventQueue::mOwner (CVE-2022-22740)

  • Mozilla: Browser window spoof using fullscreen mode (CVE-2022-22741)

  • Mozilla: Out-of-bounds memory access when inserting text in edit mode (CVE-2022-22742)

  • Mozilla: Browser window spoof using fullscreen mode (CVE-2022-22743)

  • Mozilla: Memory safety bugs fixed in Firefox 96 and Firefox ESR 91.5 (CVE-2022-22751)

  • Mozilla: Leaking cross-origin URLs through securitypolicyviolation event (CVE-2022-22745)

  • Mozilla: Spoofed origin on external protocol launch dialog (CVE-2022-22748)

  • Mozilla: Missing throttling on external protocol launch dialog (CVE-2022-22739)

  • Mozilla: Crash when handling empty pkcs7 sequence (CVE-2022-22747)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
ALSA-2022:0130
Updated
2026-11-02
OSVMGASA-2022-0013 No score

Updated nss and firefox packages fix security vulnerabilities

It was possible to construct specific XSLT markup that would be able to bypass an iframe sandbox (CVE-2021-4140).

Constructing audio sinks could have lead to a race condition when playing audio files and closing windows. This could have lead to a use-after-free causing a potentially exploitable crash (CVE-2022-22737).

Applying a CSS filter effect could have accessed out of bounds memory. This could have lead to a heap-buffer-overflow in blendGaussianBlur causing a potentially exploitable crash (CVE-2022-22738).

Malicious websites could have tricked users into accepting launching a program to handle an external URL protocol due to missing throttling on external protocol launch dialog (CVE-2022-22739).

Certain network request objects were freed too early when releasing a network request handle. This could have lead to a use-after-free of ChannelEventQueue::mOwner causing a potentially exploitable crash (CVE-2022-22740).

When resizing a popup while requesting fullscreen access, the popup would have become unable to leave fullscreen mode (CVE-2022-22741).

When inserting text while in edit mode, some characters might have lead to out-of-bounds memory access causing a potentially exploitable crash (CVE-2022-22742).

When navigating from inside an iframe while requesting fullscreen access, an attacker-controlled tab could have made the browser unable to leave fullscreen mode (CVE-2022-22743).

Securitypolicyviolation events could have leaked cross-origin information for frame-ancestors violations (CVE-2022-22745).

After accepting an untrusted certificate, handling an empty pkcs7 sequence as part of the certificate data could have lead to a crash. This crash is believed to be unexploitable (CVE-2022-22747).

Malicious websites could have confused Firefox into showing the wrong origin when asking to launch a program and handling an external URL protocol (CVE-2022-22748).

Mozilla developers Calixte Denizet, Kershaw Chang, Christian Holler, Jason Kratzer, Gabriele Svelto, Tyson Smith, Simon Giesecke, and Steve Fink reported memory safety bugs present in Firefox ESR 91.4. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code (CVE-2022-22751).

Record
MGASA-2022-0013
Updated
2026-11-02
OSVMGASA-2022-0019 No score

Updated thunderbird packages fix security vulnerability

It was possible to construct specific XSLT markup that would be able to bypass an iframe sandbox (CVE-2021-4140).

Constructing audio sinks could have lead to a race condition when playing audio files and closing windows. This could have lead to a use-after-free causing a potentially exploitable crash (CVE-2022-22737).

Applying a CSS filter effect could have accessed out of bounds memory. This could have lead to a heap-buffer-overflow in blendGaussianBlur causing a potentially exploitable crash (CVE-2022-22738).

Malicious websites could have tricked users into accepting launching a program to handle an external URL protocol due to missing throttling on external protocol launch dialog (CVE-2022-22739).

Certain network request objects were freed too early when releasing a network request handle. This could have lead to a use-after-free of ChannelEventQueue::mOwner causing a potentially exploitable crash (CVE-2022-22740).

When resizing a popup while requesting fullscreen access, the popup would have become unable to leave fullscreen mode (CVE-2022-22741).

When inserting text while in edit mode, some characters might have lead to out-of-bounds memory access causing a potentially exploitable crash (CVE-2022-22742).

When navigating from inside an iframe while requesting fullscreen access, an attacker-controlled tab could have made the browser unable to leave fullscreen mode (CVE-2022-22743).

Securitypolicyviolation events could have leaked cross-origin information for frame-ancestors violations (CVE-2022-22745).

After accepting an untrusted certificate, handling an empty pkcs7 sequence as part of the certificate data could have lead to a crash. This crash is believed to be unexploitable (CVE-2022-22747).

Malicious websites could have confused Thunderbird into showing the wrong origin when asking to launch a program and handling an external URL protocol (CVE-2022-22748).

Mozilla developers Calixte Denizet, Kershaw Chang, Christian Holler, Jason Kratzer, Gabriele Svelto, Tyson Smith, Simon Giesecke, and Steve Fink reported memory safety bugs present in Thunderbird 91.4. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code (CVE-2022-22751).

Record
MGASA-2022-0019
Updated
2026-11-02
OSVopenSUSE-SU-2022:0136-1 No score

Security update for MozillaFirefox

This update for MozillaFirefox fixes the following issues:

  • CVE-2021-4140: Fixed iframe sandbox bypass with XSLT (bsc#1194547).
  • CVE-2022-22737: Fixed race condition when playing audio files (bsc#1194547).
  • CVE-2022-22738: Fixed heap-buffer-overflow in blendGaussianBlur (bsc#1194547).
  • CVE-2022-22739: Fixed missing throttling on external protocol launch dialog (bsc#1194547).
  • CVE-2022-22740: Fixed use-after-free of ChannelEventQueue::mOwner (bsc#1194547).
  • CVE-2022-22741: Fixed browser window spoof using fullscreen mode (bsc#1194547).
  • CVE-2022-22742: Fixed out-of-bounds memory access when inserting text in edit mode (bsc#1194547).
  • CVE-2022-22743: Fixed browser window spoof using fullscreen mode (bsc#1194547).
  • CVE-2022-22744: Fixed possible command injection via the 'Copy as curl' feature in DevTools (bsc#1194547).
  • CVE-2022-22745: Fixed leaking cross-origin URLs through securitypolicyviolation event (bsc#1194547).
  • CVE-2022-22746: Fixed calling into reportValidity could have lead to fullscreen window spoof (bsc#1194547).
  • CVE-2022-22747: Fixed crash when handling empty pkcs7 sequence(bsc#1194547).
  • CVE-2022-22748: Fixed spoofed origin on external protocol launch dialog (bsc#1194547).
  • CVE-2022-22751: Fixed memory safety bugs (bsc#1194547).
Record
openSUSE-SU-2022:0136-1
Updated
2026-11-02
OSVopenSUSE-SU-2022:0199-1 No score

Security update for MozillaThunderbird

This update for MozillaThunderbird fixes the following issues:

  • CVE-2021-4140: Fixed Iframe sandbox bypass with XSLT (bsc#1194547).
  • CVE-2022-22737: Fixed race condition when playing audio files (bsc#1194547).
  • CVE-2022-22738: Fixed heap-buffer-overflow in blendGaussianBlur (bsc#1194547).
  • CVE-2022-22739: Fixed missing throttling on external protocol launch dialog (bsc#1194547).
  • CVE-2022-22740: Fixed use-after-free of ChannelEventQueue::mOwner (bsc#1194547).
  • CVE-2022-22741: Fixed browser window spoof using fullscreen mode (bsc#1194547).
  • CVE-2022-22742: Fixed out-of-bounds memory access when inserting text in edit mode (bsc#1194547).
  • CVE-2022-22743: Fixed browser window spoof using fullscreen mode (bsc#1194547).
  • CVE-2022-22744: Fixed possible command injection via the 'Copy as curl' feature in DevTools (bsc#1194547).
  • CVE-2022-22745: Fixed leaking cross-origin URLs through securitypolicyviolation event (bsc#1194547).
  • CVE-2022-22746: Fixed calling into reportValidity could have lead to fullscreen window spoof (bsc#1194547).
  • CVE-2022-22747: Fixed crash when handling empty pkcs7 sequence(bsc#1194547).
  • CVE-2022-22748: Fixed spoofed origin on external protocol launch dialog (bsc#1194547).
  • CVE-2022-22751: Fixed memory safety bugs (bsc#1194547).
Record
openSUSE-SU-2022:0199-1
Updated
2026-11-02
OSVopenSUSE-SU-2024:11732-1 No score

MozillaFirefox-96.0-1.1 on GA media

These are all security issues fixed in the MozillaFirefox-96.0-1.1 package on the GA media of openSUSE Tumbleweed.

Record
openSUSE-SU-2024:11732-1
Updated
2026-11-02
OSVopenSUSE-SU-2024:11733-1 No score

MozillaThunderbird-91.5.0-1.1 on GA media

These are all security issues fixed in the MozillaThunderbird-91.5.0-1.1 package on the GA media of openSUSE Tumbleweed.

Record
openSUSE-SU-2024:11733-1
Updated
2026-11-02
OSVopenSUSE-SU-2024:14572-1 No score

firefox-esr-128.5.1-1.1 on GA media

These are all security issues fixed in the firefox-esr-128.5.1-1.1 package on the GA media of openSUSE Tumbleweed.

Record
openSUSE-SU-2024:14572-1
Updated
2026-11-02
OSVSUSE-SU-2022:0115-1 No score

Security update for MozillaFirefox

This update for MozillaFirefox fixes the following issues:

  • CVE-2021-4140: Fixed iframe sandbox bypass with XSLT (bsc#1194547).
  • CVE-2022-22737: Fixed race condition when playing audio files (bsc#1194547).
  • CVE-2022-22738: Fixed heap-buffer-overflow in blendGaussianBlur (bsc#1194547).
  • CVE-2022-22739: Fixed missing throttling on external protocol launch dialog (bsc#1194547).
  • CVE-2022-22740: Fixed use-after-free of ChannelEventQueue::mOwner (bsc#1194547).
  • CVE-2022-22741: Fixed browser window spoof using fullscreen mode (bsc#1194547).
  • CVE-2022-22742: Fixed out-of-bounds memory access when inserting text in edit mode (bsc#1194547).
  • CVE-2022-22743: Fixed browser window spoof using fullscreen mode (bsc#1194547).
  • CVE-2022-22744: Fixed possible command injection via the 'Copy as curl' feature in DevTools (bsc#1194547).
  • CVE-2022-22745: Fixed leaking cross-origin URLs through securitypolicyviolation event (bsc#1194547).
  • CVE-2022-22746: Fixed calling into reportValidity could have lead to fullscreen window spoof (bsc#1194547).
  • CVE-2022-22747: Fixed crash when handling empty pkcs7 sequence(bsc#1194547).
  • CVE-2022-22748: Fixed spoofed origin on external protocol launch dialog (bsc#1194547).
  • CVE-2022-22751: Fixed memory safety bugs (bsc#1194547).
Record
SUSE-SU-2022:0115-1
Updated
2026-11-02
OSVSUSE-SU-2022:0136-1 No score

Security update for MozillaFirefox

This update for MozillaFirefox fixes the following issues:

  • CVE-2021-4140: Fixed iframe sandbox bypass with XSLT (bsc#1194547).
  • CVE-2022-22737: Fixed race condition when playing audio files (bsc#1194547).
  • CVE-2022-22738: Fixed heap-buffer-overflow in blendGaussianBlur (bsc#1194547).
  • CVE-2022-22739: Fixed missing throttling on external protocol launch dialog (bsc#1194547).
  • CVE-2022-22740: Fixed use-after-free of ChannelEventQueue::mOwner (bsc#1194547).
  • CVE-2022-22741: Fixed browser window spoof using fullscreen mode (bsc#1194547).
  • CVE-2022-22742: Fixed out-of-bounds memory access when inserting text in edit mode (bsc#1194547).
  • CVE-2022-22743: Fixed browser window spoof using fullscreen mode (bsc#1194547).
  • CVE-2022-22744: Fixed possible command injection via the 'Copy as curl' feature in DevTools (bsc#1194547).
  • CVE-2022-22745: Fixed leaking cross-origin URLs through securitypolicyviolation event (bsc#1194547).
  • CVE-2022-22746: Fixed calling into reportValidity could have lead to fullscreen window spoof (bsc#1194547).
  • CVE-2022-22747: Fixed crash when handling empty pkcs7 sequence(bsc#1194547).
  • CVE-2022-22748: Fixed spoofed origin on external protocol launch dialog (bsc#1194547).
  • CVE-2022-22751: Fixed memory safety bugs (bsc#1194547).
Record
SUSE-SU-2022:0136-1
Updated
2026-11-02
OSVSUSE-SU-2022:0137-1 No score

Security update for MozillaFirefox

This update for MozillaFirefox fixes the following issues:

  • CVE-2021-4140: Fixed iframe sandbox bypass with XSLT (bsc#1194547).
  • CVE-2022-22737: Fixed race condition when playing audio files (bsc#1194547).
  • CVE-2022-22738: Fixed heap-buffer-overflow in blendGaussianBlur (bsc#1194547).
  • CVE-2022-22739: Fixed missing throttling on external protocol launch dialog (bsc#1194547).
  • CVE-2022-22740: Fixed use-after-free of ChannelEventQueue::mOwner (bsc#1194547).
  • CVE-2022-22741: Fixed browser window spoof using fullscreen mode (bsc#1194547).
  • CVE-2022-22742: Fixed out-of-bounds memory access when inserting text in edit mode (bsc#1194547).
  • CVE-2022-22743: Fixed browser window spoof using fullscreen mode (bsc#1194547).
  • CVE-2022-22744: Fixed possible command injection via the 'Copy as curl' feature in DevTools (bsc#1194547).
  • CVE-2022-22745: Fixed leaking cross-origin URLs through securitypolicyviolation event (bsc#1194547).
  • CVE-2022-22746: Fixed calling into reportValidity could have lead to fullscreen window spoof (bsc#1194547).
  • CVE-2022-22747: Fixed crash when handling empty pkcs7 sequence(bsc#1194547).
  • CVE-2022-22748: Fixed spoofed origin on external protocol launch dialog (bsc#1194547).
  • CVE-2022-22751: Fixed memory safety bugs (bsc#1194547).
Record
SUSE-SU-2022:0137-1
Updated
2026-11-02
OSVSUSE-SU-2022:0199-1 No score

Security update for MozillaThunderbird

This update for MozillaThunderbird fixes the following issues:

  • CVE-2021-4140: Fixed Iframe sandbox bypass with XSLT (bsc#1194547).
  • CVE-2022-22737: Fixed race condition when playing audio files (bsc#1194547).
  • CVE-2022-22738: Fixed heap-buffer-overflow in blendGaussianBlur (bsc#1194547).
  • CVE-2022-22739: Fixed missing throttling on external protocol launch dialog (bsc#1194547).
  • CVE-2022-22740: Fixed use-after-free of ChannelEventQueue::mOwner (bsc#1194547).
  • CVE-2022-22741: Fixed browser window spoof using fullscreen mode (bsc#1194547).
  • CVE-2022-22742: Fixed out-of-bounds memory access when inserting text in edit mode (bsc#1194547).
  • CVE-2022-22743: Fixed browser window spoof using fullscreen mode (bsc#1194547).
  • CVE-2022-22744: Fixed possible command injection via the 'Copy as curl' feature in DevTools (bsc#1194547).
  • CVE-2022-22745: Fixed leaking cross-origin URLs through securitypolicyviolation event (bsc#1194547).
  • CVE-2022-22746: Fixed calling into reportValidity could have lead to fullscreen window spoof (bsc#1194547).
  • CVE-2022-22747: Fixed crash when handling empty pkcs7 sequence(bsc#1194547).
  • CVE-2022-22748: Fixed spoofed origin on external protocol launch dialog (bsc#1194547).
  • CVE-2022-22751: Fixed memory safety bugs (bsc#1194547).
Record
SUSE-SU-2022:0199-1
Updated
2026-11-02
OSVSUSE-SU-2022:14880-1 No score

Security update for MozillaFirefox

This update for MozillaFirefox fixes the following issues:

  • CVE-2021-4140: Fixed iframe sandbox bypass with XSLT (bsc#1194547).
  • CVE-2022-22737: Fixed race condition when playing audio files (bsc#1194547).
  • CVE-2022-22738: Fixed heap-buffer-overflow in blendGaussianBlur (bsc#1194547).
  • CVE-2022-22739: Fixed missing throttling on external protocol launch dialog (bsc#1194547).
  • CVE-2022-22740: Fixed use-after-free of ChannelEventQueue::mOwner (bsc#1194547).
  • CVE-2022-22741: Fixed browser window spoof using fullscreen mode (bsc#1194547).
  • CVE-2022-22742: Fixed out-of-bounds memory access when inserting text in edit mode (bsc#1194547).
  • CVE-2022-22743: Fixed browser window spoof using fullscreen mode (bsc#1194547).
  • CVE-2022-22744: Fixed possible command injection via the 'Copy as curl' feature in DevTools (bsc#1194547).
  • CVE-2022-22745: Fixed leaking cross-origin URLs through securitypolicyviolation event (bsc#1194547).
  • CVE-2022-22746: Fixed calling into reportValidity could have lead to fullscreen window spoof (bsc#1194547).
  • CVE-2022-22747: Fixed crash when handling empty pkcs7 sequence(bsc#1194547).
  • CVE-2022-22748: Fixed spoofed origin on external protocol launch dialog (bsc#1194547).
  • CVE-2022-22751: Fixed memory safety bugs (bsc#1194547).
Record
SUSE-SU-2022:14880-1
Updated
2026-11-02
OSVUSN-5229-1 No score

firefox vulnerabilities

Multiple security issues were discovered in Firefox. If a user were tricked into opening a specially crafted website, an attacker could potentially exploit these to cause a denial of service, spoof the browser UI, bypass security restrictions, obtain sensitive information across domains, or execute arbitrary code.

Record
USN-5229-1
Updated
2026-11-02
OSVUSN-5248-1 No score

thunderbird vulnerabilities

Multiple security issues were discovered in Thunderbird. If a user were tricked into opening a specially crafted website in a browsing context, an attacker could potentially exploit these to cause a denial of service, obtain sensitive information, trick a user into accepting unwanted permissions, conduct header splitting attacks, conduct spoofing attacks, bypass security restrictions, confuse the user, or execute arbitrary code. (CVE-2021-4129, CVE-2021-4140, CVE-2021-29981, CVE-2021-29982, CVE-2021-29987, CVE-2021-29991, CVE-2021-38495, CVE-2021-38496, CVE-2021-38497, CVE-2021-38498, CVE-2021-38500, CVE-2021-38501, CVE-2021-38503, CVE-2021-38504, CVE-2021-38506, CVE-2021-38507, CVE-2021-38508, CVE-2021-38509, CVE-2021-43534, CVE-2021-43535, CVE-2021-43536, CVE-2021-43537, CVE-2021-43538, CVE-2021-43539, CVE-2021-43541, CVE-2021-43542, CVE-2021-43543, CVE-2021-43545, CVE-2021-43656, CVE-2022-22737, CVE-2022-22738, CVE-2022-22739, CVE-2022-22740, CVE-2022-22741, CVE-2022-22742, CVE-2022-22743, CVE-2022-22745, CVE-2022-22747, CVE-2022-22748, CVE-2022-22751)

It was discovered that Thunderbird ignored the configuration to require STARTTLS for an SMTP connection. A person-in-the-middle could potentially exploit this to perform a downgrade attack in order to intercept messages or take control of a session. (CVE-2021-38502)

It was discovered that JavaScript was unexpectedly enabled in the composition area. An attacker could potentially exploit this in combination with another vulnerability, with unspecified impacts. (CVE-2021-43528)

A buffer overflow was discovered in the Matrix chat library bundled with Thunderbird. An attacker could potentially exploit this to cause a denial of service, or execute arbitrary code. (CVE-2021-44538)

It was discovered that Thunderbird's OpenPGP integration only considered the inner signed message when checking signature validity in a message that contains an additional outer MIME layer. An attacker could potentially exploit this to trick the user into thinking that a message has a valid signature. (CVE-2021-4126)

Record
USN-5248-1
Updated
2026-11-02
OSVUSN-5506-1 No score

nss vulnerabilities

Tavis Ormandy discovered that NSS incorrectly handled an empty pkcs7 sequence. A remote attacker could possibly use this issue to cause NSS to crash, resulting in a denial of service. This issue only affected Ubuntu 18.04 LTS, Ubuntu 20.04 LTS, and Ubuntu 21.10. (CVE-2022-22747)

Ronald Crane discovered that NSS incorrectly handled certain memory operations. A remote attacker could use this issue to cause NSS to crash, resulting in a denial of service, or possibly execute arbitrary code. (CVE-2022-34480)

Record
USN-5506-1
Updated
2026-11-02
OSVUSN-5872-1 No score

nss vulnerabilities

Tavis Ormandy discovered that NSS incorrectly handled an empty pkcs7 sequence. A remote attacker could possibly use this issue to cause NSS to crash, resulting in a denial of service. (CVE-2022-22747)

Ronald Crane discovered that NSS incorrectly handled certain memory operations. A remote attacker could use this issue to cause NSS to crash, resulting in a denial of service, or possibly execute arbitrary code. (CVE-2022-34480)

Record
USN-5872-1
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
firefox
Alpine:v3.16
 before 97.0-r0
97.0-r0
firefox
Alpine:v3.17
 before 97.0-r0
97.0-r0
firefox
Alpine:v3.18
 before 97.0-r0
97.0-r0
firefox
Alpine:v3.19
 before 97.0-r0
97.0-r0
firefox
Alpine:v3.20
 before 97.0-r0
97.0-r0
firefox
Alpine:v3.21
 before 97.0-r0
97.0-r0
firefox
Alpine:v3.22
 before 97.0-r0
97.0-r0
firefox
Alpine:v3.23
 before 97.0-r0
97.0-r0
firefox-esr
Alpine:v3.15
 before 91.5.0-r0
91.5.0-r0
firefox-esr
Alpine:v3.16
 before 91.5.0-r0
91.5.0-r0
Show 148 moreShow less
Affected packages
PackageAffectedFixed
firefox-esr
Alpine:v3.17
 before 91.5.0-r0
91.5.0-r0
firefox-esr
Alpine:v3.18
 before 91.5.0-r0
91.5.0-r0
firefox-esr
Alpine:v3.19
 before 91.5.0-r0
91.5.0-r0
firefox-esr
Alpine:v3.20
 before 91.5.0-r0
91.5.0-r0
firefox-esr
Alpine:v3.21
 before 91.5.0-r0
91.5.0-r0
firefox-esr
Alpine:v3.22
 before 91.5.0-r0
91.5.0-r0
firefox-esr
Alpine:v3.23
 before 91.5.0-r0
91.5.0-r0
librewolf
Alpine:v3.21
 before 97.0-r0
97.0-r0
librewolf
Alpine:v3.22
 before 97.0-r0
97.0-r0
librewolf
Alpine:v3.23
 before 97.0-r0
97.0-r0
librewolf
Alpine:v3.24
 before 97.0-r0
97.0-r0
thunderbird
Alpine:v3.16
 before 91.5.0-r0
91.5.0-r0
thunderbird
Alpine:v3.17
 before 91.5.0-r0
91.5.0-r0
thunderbird
Alpine:v3.18
 before 91.5.0-r0
91.5.0-r0
thunderbird
Alpine:v3.19
 before 91.5.0-r0
91.5.0-r0
thunderbird
Alpine:v3.20
 before 91.5.0-r0
91.5.0-r0
thunderbird
Alpine:v3.21
 before 91.5.0-r0
91.5.0-r0
thunderbird
Alpine:v3.22
 before 91.5.0-r0
91.5.0-r0
thunderbird
Alpine:v3.23
 before 91.5.0-r0
91.5.0-r0
thunderbird
AlmaLinux:8
 before 91.5.0-1.el8_5.alma.plus
91.5.0-1.el8_5.alma.plus
thunderbird
AlmaLinux:8
 before 91.5.0-1.el8_5.alma
91.5.0-1.el8_5.alma
firefox
AlmaLinux:8
 before 91.5.0-1.el8_5.alma
91.5.0-1.el8_5.alma
firefox-esr
Debian:12
 before 91.5.0esr-1
91.5.0esr-1
firefox-esr
Debian:13
 before 91.5.0esr-1
91.5.0esr-1
firefox-esr
Debian:14
 before 91.5.0esr-1
91.5.0esr-1
nss
Debian:12
 before 2:3.73-1
2:3.73-1
nss
Debian:13
 before 2:3.73-1
2:3.73-1
nss
Debian:14
 before 2:3.73-1
2:3.73-1
thunderbird
Debian:12
 before 1:91.5.0-1
1:91.5.0-1
thunderbird
Debian:13
 before 1:91.5.0-1
1:91.5.0-1
thunderbird
Debian:14
 before 1:91.5.0-1
1:91.5.0-1
firefox-esr
Debian:9
 before 91.5.0esr-1~deb9u1, plus listed versions
45.9.0esr-152.0.1esr-152.0.2esr-152.0esr-152.1.0esr-1
Show 45 moreShow less
52.2.0esr-152.2.0esr-1~deb7u152.2.0esr-1~deb8u152.2.0esr-1~deb9u152.2.0esr-252.3.0esr-152.3.0esr-1~deb7u152.3.0esr-1~deb8u152.3.0esr-1~deb8u252.3.0esr-1~deb9u152.3.0esr-252.4.0esr-1~deb8u152.4.0esr-1~deb9u152.4.0esr-252.4.0esr-2~deb7u152.5.0esr-152.5.0esr-1~deb7u152.5.0esr-1~deb8u152.5.0esr-1~deb9u152.5.2esr-152.5.2esr-1~deb7u152.5.2esr-1~deb8u152.5.2esr-1~deb9u152.5.3esr-152.6.0esr-152.6.0esr-1~deb7u152.6.0esr-1~deb8u152.6.0esr-1~deb9u152.6.0esr-252.6.0esr-2+alpha.152.6.0esr-2+alpha.252.7.0esr-152.7.0esr-1~deb8u152.7.0esr-1~deb9u152.7.1esr-152.7.1esr-1~deb7u152.7.1esr-1~deb8u152.7.1esr-1~deb9u152.7.2esr-152.7.2esr-1~deb7u152.7.2esr-1~deb8u152.7.2esr-1~deb9u152.7.3esr-152.7.3esr-1~deb7u152.7.3esr-1~deb8u1
91.5.0esr-1~deb9u1
thunderbird
Debian:9
 before 1:91.5.0-1~deb9u1, plus listed versions
1.5-41.5.0.2-11.5.0.2-21.5.0.2-31.5.0.4-1
Show 45 moreShow less
1.5.0.4-21.5.0.4-31.5.0.5-11.5.0.7-11.5.0.7-21:52.4.0-11:52.4.0-1~deb7u11:52.4.0-1~deb8u11:52.4.0-1~deb9u11:52.4.0-2~exp11:52.5.0-11:52.5.0-1~deb7u11:52.5.0-1~deb8u11:52.5.0-1~deb9u11:52.5.2-11:52.5.2-1~deb7u11:52.5.2-21:52.5.2-2~deb8u11:52.5.2-2~deb9u11:52.6.0-11:52.6.0-1+alpha.11:52.6.0-1+alpha.21:52.6.0-1~deb7u11:52.6.0-1~deb8u11:52.6.0-1~deb9u11:52.7.0-11:52.7.0-1~deb7u11:52.7.0-1~deb8u11:52.7.0-1~deb9u11:52.8.0-11:52.8.0-1~deb7u11:52.8.0-1~deb8u11:52.8.0-1~deb9u11:52.9.0-11:52.9.1-11:52.9.1-1~deb8u11:52.9.1-1~deb9u11:58.0~b3-11:60.0-11:60.0-21:60.0-2~deb9u11:60.0-31:60.0-3~deb9u11:60.0~b10-11:60.0~b2-1
1:91.5.0-1~deb9u1
nss
Debian:9
 before 2:3.26.2-1.1+deb9u5, plus listed versions
2:3.26.2-1.12:3.26.2-1.1+deb9u12:3.26.2-1.1+deb9u22:3.26.2-1.1+deb9u32:3.26.2-1.1+deb9u4
2:3.26.2-1.1+deb9u5
firefox-esr
Debian:10
 before 91.5.0esr-1~deb10u1, plus listed versions
60.7.2esr-160.8.0esr-160.8.0esr-1~deb10u160.8.0esr-1~deb8u160.8.0esr-1~deb9u1
Show 45 moreShow less
60.9.0esr-1~deb10u160.9.0esr-1~deb8u160.9.0esr-1~deb8u260.9.0esr-1~deb9u168.0.2esr-168.1.0esr-168.10.0esr-168.10.0esr-1~deb10u168.10.0esr-1~deb9u168.11.0esr-168.11.0esr-1~deb10u168.11.0esr-1~deb9u168.12.0esr-168.12.0esr-1~deb10u168.12.0esr-1~deb9u168.2.0esr-168.2.0esr-1~deb10u168.2.0esr-1~deb8u168.2.0esr-1~deb9u168.2.0esr-1~deb9u268.3.0esr-168.3.0esr-1~deb10u168.3.0esr-1~deb8u168.3.0esr-1~deb9u168.4.0esr-168.4.0esr-1~deb10u168.4.0esr-1~deb8u168.4.0esr-1~deb9u168.4.1esr-168.4.1esr-1~deb10u168.4.1esr-1~deb8u168.4.1esr-1~deb9u168.4.2esr-168.5.0esr-168.5.0esr-1~deb10u168.5.0esr-1~deb8u168.5.0esr-1~deb9u168.6.0esr-168.6.0esr-1~deb10u168.6.0esr-1~deb8u168.6.0esr-1~deb9u168.6.1esr-168.6.1esr-1~deb10u168.6.1esr-1~deb9u168.7.0esr-1
91.5.0esr-1~deb10u1
firefox-esr
Debian:11
 before 91.5.0esr-1~deb11u1, plus listed versions
78.12.0esr-178.13.0esr-178.13.0esr-1~deb10u178.13.0esr-1~deb11u178.13.0esr-1~deb9u1
Show 18 moreShow less
78.14.0esr-178.14.0esr-1~deb10u178.14.0esr-1~deb11u178.14.0esr-1~deb9u178.15.0esr-1~deb10u178.15.0esr-1~deb11u178.15.0esr-1~deb9u191.0.1esr-191.0esr-191.1.0esr-191.2.0esr-191.3.0esr-191.3.0esr-291.4.0esr-191.4.1esr-1~deb11u191.4.1esr-1~deb9u191.5.0esr-1~deb10u191.5.0esr-1~deb9u1
91.5.0esr-1~deb11u1
thunderbird
Debian:10
 before 1:91.5.0-2~deb10u1, plus listed versions
1:60.7.2-11:60.8.0-11:60.8.0-1~deb10u11:60.8.0-1~deb8u11:60.8.0-1~deb9u1
Show 45 moreShow less
1:60.8.0-21:60.9.0-11:60.9.0-1~deb10u11:60.9.0-1~deb8u11:60.9.0-1~deb9u11:65.0~b1-11:66.0~b1-11:67.0~b3-11:68.0~b1-11:68.1.1-1~exp11:68.1.2-1~exp11:68.10.0-11:68.10.0-1~deb10u11:68.10.0-1~deb9u11:68.11.0-11:68.11.0-1~deb10u11:68.11.0-1~deb9u11:68.11.0-21:68.11.0-31:68.12.0-11:68.12.0-1~deb10u11:68.12.0-1~deb9u11:68.12.0-1~deb9u21:68.2.1-11:68.2.2-11:68.2.2-1~deb10u11:68.2.2-1~deb8u11:68.2.2-1~deb9u11:68.3.0-11:68.3.0-21:68.3.0-2~deb10u11:68.3.0-2~deb8u11:68.3.0-2~deb9u11:68.3.1-11:68.4.1-11:68.4.1-1~deb10u11:68.4.1-1~deb8u11:68.4.1-1~deb9u11:68.4.2-11:68.5.0-11:68.5.0-1~deb10u11:68.5.0-1~deb8u11:68.5.0-1~deb9u11:68.6.0-11:68.6.0-1~deb10u1
1:91.5.0-2~deb10u1
thunderbird
Debian:11
 before 1:91.5.0-2~deb11u1, plus listed versions
1:78.12.0-11:78.13.0-11:78.13.0-1~deb10u11:78.13.0-1~deb11u11:78.13.0-1~deb9u1
Show 29 moreShow less
1:78.14.0-11:78.14.0-1~deb10u11:78.14.0-1~deb11u11:78.14.0-1~deb9u11:84.0~b3-11:85.0~b3-11:86.0~b3-11:88.0~b2-11:89.0~b2-11:90.0~b2-11:91.0-11:91.0.2-11:91.0~b1-11:91.0~b3-11:91.0~b5-11:91.1.0-11:91.1.1-11:91.2.0-11:91.2.1-11:91.3.0-11:91.3.2-11:91.4.0-11:91.4.1-11:91.4.1-1~deb10u11:91.4.1-1~deb11u11:91.4.1-1~deb9u11:91.5.0-11:91.5.0-1~deb9u11:91.5.0-2~deb10u1
1:91.5.0-2~deb11u1
nss
Debian:10
 before 2:3.42.1-1+deb10u5, plus listed versions
2:3.42.1-12:3.42.1-1+deb10u12:3.42.1-1+deb10u22:3.42.1-1+deb10u32:3.42.1-1+deb10u4
2:3.42.1-1+deb10u5
nss
Debian:11
 before 2:3.61-1+deb11u2, plus listed versions
2:3.61-12:3.61-1+deb11u1
2:3.61-1+deb11u2
firefox
Mageia:8
 before 91.5.0-1.mga8
91.5.0-1.mga8
firefox-l10n
Mageia:8
 before 91.5.0-1.mga8
91.5.0-1.mga8
nspr
Mageia:8
 before 4.33-1.mga8
4.33-1.mga8
nss
Mageia:8
 before 3.74.0-1.mga8
3.74.0-1.mga8
rootcerts
Mageia:8
 before 20211213.00-1.mga8
20211213.00-1.mga8
thunderbird
Mageia:8
 before 91.5.0-1.mga8
91.5.0-1.mga8
thunderbird-l10n
Mageia:8
 before 91.5.0-1.mga8
91.5.0-1.mga8
firefox
openEuler:22.03-LTS
 before 102.14.0-1.oe2203
102.14.0-1.oe2203
firefox
openEuler:22.03-LTS-SP1
 before 102.14.0-1.oe2203sp1
102.14.0-1.oe2203sp1
nss
openEuler:22.03-LTS-SP3
 before 3.72.0-10.oe2203sp3
3.72.0-10.oe2203sp3
nss
openEuler:20.03-LTS-SP4
 before 3.54.0-11.oe2003sp4
3.54.0-11.oe2003sp4
nss
openEuler:22.03-LTS-SP4
 before 3.72.0-10.oe2203sp4
3.72.0-10.oe2203sp4
thunderbird
Red Hat:rhel_eus:8.2::appstream
 before 0:91.5.0-1.el8_2
0:91.5.0-1.el8_2
thunderbird-debuginfo
Red Hat:rhel_eus:8.2::appstream
 before 0:91.5.0-1.el8_2
0:91.5.0-1.el8_2
thunderbird-debugsource
Red Hat:rhel_eus:8.2::appstream
 before 0:91.5.0-1.el8_2
0:91.5.0-1.el8_2
firefox
Red Hat:enterprise_linux:7::client
 before 0:91.5.0-1.el7_9
0:91.5.0-1.el7_9
firefox-debuginfo
Red Hat:enterprise_linux:7::client
 before 0:91.5.0-1.el7_9
0:91.5.0-1.el7_9
firefox
Red Hat:enterprise_linux:7::server
 before 0:91.5.0-1.el7_9
0:91.5.0-1.el7_9
firefox-debuginfo
Red Hat:enterprise_linux:7::server
 before 0:91.5.0-1.el7_9
0:91.5.0-1.el7_9
firefox
Red Hat:enterprise_linux:7::workstation
 before 0:91.5.0-1.el7_9
0:91.5.0-1.el7_9
firefox-debuginfo
Red Hat:enterprise_linux:7::workstation
 before 0:91.5.0-1.el7_9
0:91.5.0-1.el7_9
firefox
Red Hat:rhel_e4s:8.1::appstream
 before 0:91.5.0-1.el8_1
0:91.5.0-1.el8_1
firefox-debuginfo
Red Hat:rhel_e4s:8.1::appstream
 before 0:91.5.0-1.el8_1
0:91.5.0-1.el8_1
firefox-debugsource
Red Hat:rhel_e4s:8.1::appstream
 before 0:91.5.0-1.el8_1
0:91.5.0-1.el8_1
firefox
Red Hat:rhel_eus:8.4::appstream
 before 0:91.5.0-1.el8_4
0:91.5.0-1.el8_4
firefox-debuginfo
Red Hat:rhel_eus:8.4::appstream
 before 0:91.5.0-1.el8_4
0:91.5.0-1.el8_4
firefox-debugsource
Red Hat:rhel_eus:8.4::appstream
 before 0:91.5.0-1.el8_4
0:91.5.0-1.el8_4
thunderbird
Red Hat:enterprise_linux:7::client
 before 0:91.5.0-1.el7_9
0:91.5.0-1.el7_9
thunderbird-debuginfo
Red Hat:enterprise_linux:7::client
 before 0:91.5.0-1.el7_9
0:91.5.0-1.el7_9
thunderbird
Red Hat:enterprise_linux:7::server
 before 0:91.5.0-1.el7_9
0:91.5.0-1.el7_9
thunderbird-debuginfo
Red Hat:enterprise_linux:7::server
 before 0:91.5.0-1.el7_9
0:91.5.0-1.el7_9
thunderbird
Red Hat:enterprise_linux:7::workstation
 before 0:91.5.0-1.el7_9
0:91.5.0-1.el7_9
thunderbird-debuginfo
Red Hat:enterprise_linux:7::workstation
 before 0:91.5.0-1.el7_9
0:91.5.0-1.el7_9
thunderbird
Red Hat:rhel_eus:8.4::appstream
 before 0:91.5.0-1.el8_4
0:91.5.0-1.el8_4
thunderbird-debuginfo
Red Hat:rhel_eus:8.4::appstream
 before 0:91.5.0-1.el8_4
0:91.5.0-1.el8_4
thunderbird-debugsource
Red Hat:rhel_eus:8.4::appstream
 before 0:91.5.0-1.el8_4
0:91.5.0-1.el8_4
thunderbird
Red Hat:enterprise_linux:8::appstream
 before 0:91.5.0-1.el8_5
0:91.5.0-1.el8_5
thunderbird-debuginfo
Red Hat:enterprise_linux:8::appstream
 before 0:91.5.0-1.el8_5
0:91.5.0-1.el8_5
thunderbird-debugsource
Red Hat:enterprise_linux:8::appstream
 before 0:91.5.0-1.el8_5
0:91.5.0-1.el8_5
firefox
Red Hat:enterprise_linux:8::appstream
 before 0:91.5.0-1.el8_5
0:91.5.0-1.el8_5
firefox-debuginfo
Red Hat:enterprise_linux:8::appstream
 before 0:91.5.0-1.el8_5
0:91.5.0-1.el8_5
firefox-debugsource
Red Hat:enterprise_linux:8::appstream
 before 0:91.5.0-1.el8_5
0:91.5.0-1.el8_5
thunderbird
Red Hat:rhel_e4s:8.1::appstream
 before 0:91.5.0-1.el8_1
0:91.5.0-1.el8_1
thunderbird-debuginfo
Red Hat:rhel_e4s:8.1::appstream
 before 0:91.5.0-1.el8_1
0:91.5.0-1.el8_1
thunderbird-debugsource
Red Hat:rhel_e4s:8.1::appstream
 before 0:91.5.0-1.el8_1
0:91.5.0-1.el8_1
firefox
Red Hat:rhel_eus:8.2::appstream
 before 0:91.5.0-1.el8_2
0:91.5.0-1.el8_2
firefox-debuginfo
Red Hat:rhel_eus:8.2::appstream
 before 0:91.5.0-1.el8_2
0:91.5.0-1.el8_2
firefox-debugsource
Red Hat:rhel_eus:8.2::appstream
 before 0:91.5.0-1.el8_2
0:91.5.0-1.el8_2
thunderbird
Rocky Linux:8
 before 0:91.5.0-1.el8_5
0:91.5.0-1.el8_5
firefox
Rocky Linux:8
 before 0:91.5.0-1.el8_5
0:91.5.0-1.el8_5
MozillaFirefox
SUSE:HPE Helion OpenStack 8
 before 91.5.0-112.86.1
91.5.0-112.86.1
MozillaFirefox
SUSE:OpenStack Cloud 8
 before 91.5.0-112.86.1
91.5.0-112.86.1
MozillaFirefox
SUSE:OpenStack Cloud 9
 before 91.5.0-112.86.1
91.5.0-112.86.1
MozillaFirefox
SUSE:OpenStack Cloud Crowbar 8
 before 91.5.0-112.86.1
91.5.0-112.86.1
MozillaFirefox
SUSE:OpenStack Cloud Crowbar 9
 before 91.5.0-112.86.1
91.5.0-112.86.1
MozillaFirefox
SUSE:Linux Enterprise Server for SAP Applications 12 SP3
 before 91.5.0-112.86.1
91.5.0-112.86.1
MozillaFirefox
SUSE:Linux Enterprise Server for SAP Applications 12 SP4
 before 91.5.0-112.86.1
91.5.0-112.86.1
MozillaFirefox
SUSE:Linux Enterprise Software Development Kit 12 SP5
 before 91.5.0-112.86.1
91.5.0-112.86.1
MozillaFirefox
SUSE:Linux Enterprise Server 12 SP2-BCL
 before 91.5.0-112.86.1
91.5.0-112.86.1
MozillaFirefox
SUSE:Linux Enterprise Server 12 SP3-LTSS
 before 91.5.0-112.86.1
91.5.0-112.86.1
MozillaFirefox
SUSE:Linux Enterprise Server 12 SP3-BCL
 before 91.5.0-112.86.1
91.5.0-112.86.1
MozillaFirefox
SUSE:Linux Enterprise Server 12 SP4-LTSS
 before 91.5.0-112.86.1
91.5.0-112.86.1
MozillaFirefox
SUSE:Linux Enterprise Server 12 SP5
 before 91.5.0-112.86.1
91.5.0-112.86.1
MozillaFirefox
SUSE:Linux Enterprise Server for SAP Applications 12 SP5
 before 91.5.0-112.86.1
91.5.0-112.86.1
MozillaFirefox
SUSE:Linux Enterprise Module for Desktop Applications 15 SP3
 before 91.5.0-152.12.1
91.5.0-152.12.1
MozillaFirefox
SUSE:Linux Enterprise High Performance Computing 15 SP2-ESPOS
 before 91.5.0-152.12.1
91.5.0-152.12.1
MozillaFirefox
SUSE:Linux Enterprise High Performance Computing 15 SP2-LTSS
 before 91.5.0-152.12.1
91.5.0-152.12.1
MozillaFirefox
SUSE:Linux Enterprise Server 15 SP2-BCL
 before 91.5.0-152.12.1
91.5.0-152.12.1
MozillaFirefox
SUSE:Linux Enterprise Server 15 SP2-LTSS
 before 91.5.0-152.12.1
91.5.0-152.12.1
MozillaFirefox
SUSE:Linux Enterprise Server for SAP Applications 15 SP2
 before 91.5.0-152.12.1
91.5.0-152.12.1
MozillaFirefox
SUSE:Manager Proxy 4.1
 before 91.5.0-152.12.1
91.5.0-152.12.1
MozillaFirefox
SUSE:Manager Retail Branch Server 4.1
 before 91.5.0-152.12.1
91.5.0-152.12.1
MozillaFirefox
SUSE:Manager Server 4.1
 before 91.5.0-152.12.1
91.5.0-152.12.1
MozillaFirefox
SUSE:Enterprise Storage 7
 before 91.5.0-152.12.1
91.5.0-152.12.1
MozillaFirefox
SUSE:Linux Enterprise High Performance Computing 15-ESPOS
 before 91.5.0-150.15.1
91.5.0-150.15.1
MozillaFirefox
SUSE:Linux Enterprise High Performance Computing 15-LTSS
 before 91.5.0-150.15.1
91.5.0-150.15.1
MozillaFirefox
SUSE:Linux Enterprise High Performance Computing 15 SP1-ESPOS
 before 91.5.0-150.15.1
91.5.0-150.15.1
MozillaFirefox
SUSE:Linux Enterprise High Performance Computing 15 SP1-LTSS
 before 91.5.0-150.15.1
91.5.0-150.15.1
MozillaFirefox
SUSE:Linux Enterprise Server 15-LTSS
 before 91.5.0-150.15.1
91.5.0-150.15.1
MozillaFirefox
SUSE:Linux Enterprise Server 15 SP1-BCL
 before 91.5.0-150.15.1
91.5.0-150.15.1
MozillaFirefox
SUSE:Linux Enterprise Server 15 SP1-LTSS
 before 91.5.0-150.15.1
91.5.0-150.15.1
MozillaFirefox
SUSE:Linux Enterprise Server for SAP Applications 15
 before 91.5.0-150.15.1
91.5.0-150.15.1
MozillaFirefox
SUSE:Linux Enterprise Server for SAP Applications 15 SP1
 before 91.5.0-150.15.1
91.5.0-150.15.1
MozillaFirefox
SUSE:Enterprise Storage 6
 before 91.5.0-150.15.1
91.5.0-150.15.1
MozillaThunderbird
SUSE:Linux Enterprise Workstation Extension 15 SP3
 before 91.5.0-8.51.1
91.5.0-8.51.1
MozillaFirefox
SUSE:Linux Enterprise Server 11 SP4-LTSS
 before 91.5.0-78.159.1
91.5.0-78.159.1
nss
Ubuntu:Pro:14.04:LTS
 before 2:3.28.4-0ubuntu0.14.04.5+esm11, plus listed versions
2:3.15.1-1ubuntu12:3.15.2-12:3.15.3-12:3.15.3.1-12:3.15.3.1-1.1
Show 33 moreShow less
2:3.15.3.1-1.1ubuntu12:3.15.4-1ubuntu32:3.15.4-1ubuntu42:3.15.4-1ubuntu52:3.15.4-1ubuntu62:3.15.4-1ubuntu72:3.15.4-1ubuntu7.12:3.17-0ubuntu0.14.04.12:3.17.1-0ubuntu0.14.04.12:3.17.1-0ubuntu0.14.04.22:3.17.4-0ubuntu0.14.04.12:3.19.2-0ubuntu0.14.04.12:3.19.2.1-0ubuntu0.14.04.12:3.19.2.1-0ubuntu0.14.04.22:3.21-0ubuntu0.14.04.12:3.21-0ubuntu0.14.04.22:3.23-0ubuntu0.14.04.12:3.26.2-0ubuntu0.14.04.32:3.28.4-0ubuntu0.14.04.12:3.28.4-0ubuntu0.14.04.22:3.28.4-0ubuntu0.14.04.32:3.28.4-0ubuntu0.14.04.42:3.28.4-0ubuntu0.14.04.52:3.28.4-0ubuntu0.14.04.5+esm12:3.28.4-0ubuntu0.14.04.5+esm22:3.28.4-0ubuntu0.14.04.5+esm32:3.28.4-0ubuntu0.14.04.5+esm42:3.28.4-0ubuntu0.14.04.5+esm52:3.28.4-0ubuntu0.14.04.5+esm62:3.28.4-0ubuntu0.14.04.5+esm72:3.28.4-0ubuntu0.14.04.5+esm82:3.28.4-0ubuntu0.14.04.5+esm92:3.28.4-0ubuntu0.14.04.5+esm10
2:3.28.4-0ubuntu0.14.04.5+esm11
nss
Ubuntu:Pro:16.04:LTS
 before 2:3.28.4-0ubuntu0.16.04.14+esm3, plus listed versions
2:3.19.2-1ubuntu12:3.19.2.1-0ubuntu12:3.21-1ubuntu22:3.21-1ubuntu32:3.21-1ubuntu4
Show 17 moreShow less
2:3.23-0ubuntu0.16.04.12:3.26.2-0ubuntu0.16.04.22:3.28.4-0ubuntu0.16.04.12:3.28.4-0ubuntu0.16.04.22:3.28.4-0ubuntu0.16.04.32:3.28.4-0ubuntu0.16.04.42:3.28.4-0ubuntu0.16.04.52:3.28.4-0ubuntu0.16.04.62:3.28.4-0ubuntu0.16.04.82:3.28.4-0ubuntu0.16.04.92:3.28.4-0ubuntu0.16.04.102:3.28.4-0ubuntu0.16.04.112:3.28.4-0ubuntu0.16.04.122:3.28.4-0ubuntu0.16.04.132:3.28.4-0ubuntu0.16.04.142:3.28.4-0ubuntu0.16.04.14+esm12:3.28.4-0ubuntu0.16.04.14+esm2
2:3.28.4-0ubuntu0.16.04.14+esm3
firefox
Ubuntu:18.04:LTS
 before 96.0+build2-0ubuntu0.18.04.1, plus listed versions
56.0+build6-0ubuntu157.0.1+build2-0ubuntu159.0.1+build1-0ubuntu159.0.2+build1-0ubuntu160.0+build2-0ubuntu1
Show 45 moreShow less
60.0.1+build2-0ubuntu0.18.04.160.0.2+build1-0ubuntu0.18.04.161.0+build3-0ubuntu0.18.04.161.0.1+build1-0ubuntu0.18.04.162.0+build2-0ubuntu0.18.04.362.0+build2-0ubuntu0.18.04.462.0+build2-0ubuntu0.18.04.562.0.3+build1-0ubuntu0.18.04.163.0+build2-0ubuntu0.18.04.263.0.3+build1-0ubuntu0.18.04.164.0+build3-0ubuntu0.18.04.165.0+build2-0ubuntu0.18.04.165.0.1+build2-0ubuntu0.18.04.166.0+build3-0ubuntu0.18.04.166.0.1+build1-0ubuntu0.18.04.166.0.2+build1-0ubuntu0.18.04.166.0.3+build1-0ubuntu0.18.04.166.0.4+build3-0ubuntu0.18.04.166.0.5+build1-0ubuntu0.18.04.167.0+build2-0ubuntu0.18.04.167.0.1+build1-0ubuntu0.18.04.167.0.2+build2-0ubuntu0.18.04.167.0.3+build1-0ubuntu0.18.04.167.0.4+build1-0ubuntu0.18.04.168.0+build3-0ubuntu0.18.04.168.0.1+build1-0ubuntu0.18.04.168.0.2+build1-0ubuntu0.18.04.169.0+build2-0ubuntu0.18.04.169.0.1+build1-0ubuntu0.18.04.169.0.2+build1-0ubuntu0.18.04.170.0+build2-0ubuntu0.18.04.170.0.1+build1-0ubuntu0.18.04.171.0+build5-0ubuntu0.18.04.172.0.1+build1-0ubuntu0.18.04.172.0.2+build1-0ubuntu0.18.04.173.0+build3-0ubuntu0.18.04.173.0.1+build1-0ubuntu0.18.04.174.0+build3-0ubuntu0.18.04.174.0.1+build1-0ubuntu0.18.04.175.0+build3-0ubuntu0.18.04.176.0+build2-0ubuntu0.18.04.176.0.1+build1-0ubuntu0.18.04.177.0.1+build1-0ubuntu0.18.04.178.0.1+build1-0ubuntu0.18.04.178.0.2+build2-0ubuntu0.18.04.1
96.0+build2-0ubuntu0.18.04.1
nss
Ubuntu:18.04:LTS
 before 2:3.35-2ubuntu2.15, plus listed versions
2:3.32-1ubuntu32:3.34-1ubuntu12:3.35-2ubuntu22:3.35-2ubuntu2.12:3.35-2ubuntu2.2
Show 10 moreShow less
2:3.35-2ubuntu2.32:3.35-2ubuntu2.52:3.35-2ubuntu2.62:3.35-2ubuntu2.72:3.35-2ubuntu2.82:3.35-2ubuntu2.92:3.35-2ubuntu2.112:3.35-2ubuntu2.122:3.35-2ubuntu2.132:3.35-2ubuntu2.14
2:3.35-2ubuntu2.15
thunderbird
Ubuntu:18.04:LTS
 before 1:91.5.0+build1-0ubuntu0.18.04.1, plus listed versions
1:52.4.0+build1-0ubuntu21:52.6.0+build1-0ubuntu11:52.7.0+build1-0ubuntu11:52.8.0+build1-0ubuntu0.18.04.11:52.9.1+build3-0ubuntu0.18.04.1
Show 20 moreShow less
1:60.2.1+build1-0ubuntu0.18.04.21:60.4.0+build2-0ubuntu0.18.04.11:60.5.1+build2-0ubuntu0.18.04.11:60.6.1+build2-0ubuntu0.18.04.11:60.7.0+build1-0ubuntu0.18.04.11:60.7.1+build1-0ubuntu0.18.04.11:60.7.2+build2-0ubuntu0.18.04.11:60.8.0+build1-0ubuntu0.18.04.11:60.9.0+build1-0ubuntu0.18.04.11:68.2.1+build1-0ubuntu0.18.04.11:68.2.2+build1-0ubuntu0.18.04.11:68.4.1+build1-0ubuntu0.18.04.11:68.7.0+build1-0ubuntu0.18.04.11:68.8.0+build2-0ubuntu0.18.04.21:68.10.0+build1-0ubuntu0.18.04.11:78.8.1+build1-0ubuntu0.18.04.11:78.11.0+build1-0ubuntu0.18.04.21:78.13.0+build1-0ubuntu0.18.04.11:78.14.0+build1-0ubuntu0.18.04.11:78.14.0+build1-0ubuntu0.18.04.2
1:91.5.0+build1-0ubuntu0.18.04.1
mozjs52
Ubuntu:18.04:LTS
 All versions, plus listed versions
52.3.1-0ubuntu352.3.1-7fakesync152.8.1-0ubuntu0.18.04.152.9.1-0ubuntu0.18.04.1
 None known
mozjs38
Ubuntu:18.04:LTS
 All versions, plus listed versions
38.8.0~repack1-0ubuntu138.8.0~repack1-0ubuntu338.8.0~repack1-0ubuntu4
 None known
firefox
Ubuntu:20.04:LTS
 before 96.0+build2-0ubuntu0.20.04.1, plus listed versions
69.0.3+build1-0ubuntu170.0+build2-0ubuntu170.0+build2-0ubuntu270.0.1+build1-0ubuntu271.0+build2-0ubuntu2
Show 45 moreShow less
71.0+build5-0ubuntu172.0.1+build1-0ubuntu172.0.2+build1-0ubuntu173.0+build1-0ubuntu173.0+build2-0ubuntu173.0+build3-0ubuntu173.0.1+build1-0ubuntu174.0+build1-0ubuntu174.0+build2-0ubuntu174.0+build2-0ubuntu274.0+build3-0ubuntu175.0+build3-0ubuntu176.0+build2-0ubuntu0.20.04.176.0.1+build1-0ubuntu0.20.04.177.0.1+build1-0ubuntu0.20.04.178.0.1+build1-0ubuntu0.20.04.178.0.2+build2-0ubuntu0.20.04.179.0+build1-0ubuntu0.20.04.180.0+build2-0ubuntu0.20.04.180.0.1+build1-0ubuntu0.20.04.181.0+build2-0ubuntu0.20.04.181.0.2+build1-0ubuntu0.20.04.182.0+build2-0ubuntu0.20.04.182.0.2+build1-0ubuntu0.20.04.182.0.3+build1-0ubuntu0.20.04.183.0+build2-0ubuntu0.20.04.184.0+build3-0ubuntu0.20.04.184.0.1+build1-0ubuntu0.20.04.184.0.2+build1-0ubuntu0.20.04.185.0+build1-0ubuntu0.20.04.185.0.1+build1-0ubuntu0.20.04.186.0+build3-0ubuntu0.20.04.186.0.1+build1-0ubuntu0.20.04.187.0+build3-0ubuntu0.20.04.288.0+build2-0ubuntu0.20.04.188.0.1+build1-0ubuntu0.20.04.289.0+build2-0ubuntu0.20.04.289.0.1+build1-0ubuntu0.20.04.189.0.2+build1-0ubuntu0.20.04.190.0+build1-0ubuntu0.20.04.190.0.2+build1-0ubuntu0.20.04.191.0+build2-0ubuntu0.20.04.191.0.1+build1-0ubuntu0.20.04.191.0.2+build1-0ubuntu0.20.04.192.0+build3-0ubuntu0.20.04.1
96.0+build2-0ubuntu0.20.04.1
nss
Ubuntu:20.04:LTS
 before 2:3.49.1-1ubuntu1.8, plus listed versions
2:3.45-1ubuntu22:3.47-1ubuntu12:3.47-1ubuntu22:3.48-1ubuntu12:3.49.1-1ubuntu1
Show 6 moreShow less
2:3.49.1-1ubuntu1.12:3.49.1-1ubuntu1.22:3.49.1-1ubuntu1.42:3.49.1-1ubuntu1.52:3.49.1-1ubuntu1.62:3.49.1-1ubuntu1.7
2:3.49.1-1ubuntu1.8
thunderbird
Ubuntu:20.04:LTS
 before 1:91.5.0+build1-0ubuntu0.20.04.1, plus listed versions
1:68.1.2+build1-0ubuntu11:68.1.2+build1-0ubuntu21:68.2.1+build1-0ubuntu11:68.2.2+build1-0ubuntu11:68.3.0+build2-0ubuntu1
Show 15 moreShow less
1:68.3.1+build1-0ubuntu21:68.4.1+build1-0ubuntu11:68.4.2+build2-0ubuntu11:68.5.0+build1-0ubuntu11:68.6.0+build2-0ubuntu11:68.7.0+build1-0ubuntu11:68.7.0+build1-0ubuntu21:68.8.0+build2-0ubuntu0.20.04.21:68.10.0+build1-0ubuntu0.20.04.11:78.7.1+build1-0ubuntu0.20.04.11:78.8.1+build1-0ubuntu0.20.04.11:78.11.0+build1-0ubuntu0.20.04.21:78.13.0+build1-0ubuntu0.20.04.21:78.14.0+build1-0ubuntu0.20.04.11:78.14.0+build1-0ubuntu0.20.04.2
1:91.5.0+build1-0ubuntu0.20.04.1
mozjs68
Ubuntu:20.04:LTS
 All versions, plus listed versions
68.5.0-1~fakesync68.5.0-2~fakesync68.6.0-168.6.0-1ubuntu1
 None known
mozjs52
Ubuntu:20.04:LTS
 All versions, plus listed versions
52.9.1-1build152.9.1-1ubuntu3
 None known
firefox
Ubuntu:22.04:LTS
 before 96.0+build2-0ubuntu1, plus listed versions
93.0+build1-0ubuntu394.0+build3-0ubuntu194.0.2+build1-0ubuntu194.0.2+build2-0ubuntu195.0+build1-0ubuntu195.0.1+build2-0ubuntu195.0.2+build1-0ubuntu1
96.0+build2-0ubuntu1
mozjs78
Ubuntu:22.04:LTS
 All versions, plus listed versions
78.13.0-178.15.0-278.15.0-4ubuntu1
 None known
thunderbird
Ubuntu:22.04:LTS
 before 1:91.5.0+build1-0ubuntu1, plus listed versions
1:91.1.2+build1-0ubuntu11:91.3.0+build2-0ubuntu11:91.3.1+build1-0ubuntu11:91.3.2+build1-0ubuntu11:91.4.0+build1.1-0ubuntu11:91.4.0+build2-0ubuntu1
1:91.5.0+build1-0ubuntu1
nss
Ubuntu:22.04:LTS
 before 2:3.68.2-0ubuntu1.1, plus listed versions
2:3.68-1ubuntu12:3.68-1ubuntu22:3.68.2-0ubuntu1
2:3.68.2-0ubuntu1.1
civetweb
openSUSE:Leap 15.3
 before 1.15-lp153.2.3.1
1.15-lp153.2.3.1
MozillaFirefox
openSUSE:Leap 15.3
 before 91.5.0-152.12.1
91.5.0-152.12.1
MozillaThunderbird
openSUSE:Leap 15.3
 before 91.5.0-8.51.1
91.5.0-8.51.1
MozillaFirefox
openSUSE:Tumbleweed
 before 96.0-1.1
96.0-1.1
MozillaThunderbird
openSUSE:Tumbleweed
 before 91.5.0-1.1
91.5.0-1.1
firefox-esr
openSUSE:Tumbleweed
 before 128.5.1-1.1
128.5.1-1.1

History

History
RecordedChangedSources
affected, aliases, referencesOSV
first indexedCVE List, EUVD, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2022-22747 is a medium vulnerability (CVSS 6.5) in Mozilla Firefox, published January 11, 2022. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.67%, the 52nd percentile. Fixed in firefox 97.0-r0.

References

Show 194 moreShow less
This page doesn't list everything

Left out here: 587 versions, 2,104 references and the rest of 2 source descriptions. The JSON record has them.

Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open