CVE-2022-22753
A Time-of-Check Time-of-Use bug existed in the Maintenance (Updater) Service that could be abused...
7.1 HighFix available
A Time-of-Check Time-of-Use bug existed in the Maintenance (Updater) Service that could be abused to grant Users write access to an arbitrary directory. This could have been used to escalate to SYSTEM access.<br>This bug only affects Firefox on Windows. Other operating systems are unaffected.. This vulnerability affects Firefox < 97, Thunderbird < 91.6, and Firefox ESR < 91.6.
Attack profile
How easy it is to exploit
- Attack vector
- Network
- Complexity
- High
- Privileges needed
- Low
- User interaction
- Required
What an attacker can affect
- Confidentiality
- High
- Integrity
- High
- Availability
- High
Exploit likelihood
0.65%Down 0.3 points since Dec 23, 2022
What each source reports
NVD Score used
A Time-of-Check Time-of-Use bug existed in the Maintenance (Updater) Service that could be abused to grant Users write access to an arbitrary directory. This could have been used to escalate to SYSTEM access.<br>This bug only affects Firefox on Windows. Other operating systems are unaffected.. This vulnerability affects Firefox < 97, Thunderbird < 91.6, and Firefox ESR < 91.6.
- Record
CVE-2022-22753- CVSS 3.1
- 7.1 High
CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H - Weakness
- CWE-367
- Updated
- 2026-11-02
CVE List
A Time-of-Check Time-of-Use bug existed in the Maintenance (Updater) Service that could be abused to grant Users write access to an arbitrary directory. This could have been used to escalate to SYSTEM access.<br>This bug only affects Firefox on Windows. Other operating systems are unaffected.. This vulnerability affects Firefox < 97, Thunderbird < 91.6, and Firefox ESR < 91.6.
- Record
CVE-2022-22753- CVSS 3.1
- 7.1 High
CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H - Weakness
- CWE-367
- Updated
- 2026-11-02
EUVDEUVD-2022-27896
A Time-of-Check Time-of-Use bug existed in the Maintenance (Updater) Service that could be abused to grant Users write access to an arbitrary directory. This could have been used to escalate to SYSTEM access.<br>This bug only affects Firefox on Windows. Other operating systems are unaffected.. This vulnerability affects Firefox < 97, Thunderbird < 91.6, and Firefox ESR < 91.6.
- Record
EUVD-2022-27896- CVSS 3.1
- 7.1 High
CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
GitHub AdvisoriesGHSA-pr6h-wqwg-8wxx
A Time-of-Check Time-of-Use bug existed in the Maintenance (Updater) Service that could be abused...
A Time-of-Check Time-of-Use bug existed in the Maintenance (Updater) Service that could be abused to grant Users write access to an arbitrary directory. This could have been used to escalate to SYSTEM access.<br>This bug only affects Firefox on Windows. Other operating systems are unaffected.. This vulnerability affects Firefox < 97, Thunderbird < 91.6, and Firefox ESR < 91.6.
- Record
GHSA-pr6h-wqwg-8wxx- CVSS 3.1
- 7.1 High
CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H - Weakness
- CWE-367
- Updated
- 2026-11-02
OSVALPINE-CVE-2022-22753
A Time-of-Check Time-of-Use bug existed in the Maintenance (Updater) Service that could be abused to grant Users write access to an arbitrary directory. This could have been used to escalate to SYSTEM access.<br>This bug only affects Firefox on Windows. Other operating systems are unaffected.. This vulnerability affects Firefox < 97, Thunderbird < 91.6, and Firefox ESR < 91.6.
- Record
ALPINE-CVE-2022-22753- CVSS 3.1
- 7.1 High
CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H - Updated
- 2026-11-03
OSVopenSUSE-SU-2022:0559-1 No score
Security update for MozillaThunderbird
This update for MozillaThunderbird fixes the following issues:
-
Mozilla Thunderbird 91.6.1 / MFSA 2022-07 (bsc#1196072)
- CVE-2022-0566 (bmo#1753094) Crafted email could trigger an out-of-bounds write
-
Mozilla Thunderbird 91.6 / MFSA 2022-06 (bsc#1195682)
- CVE-2022-22753 (bmo#1732435) Privilege Escalation to SYSTEM on Windows via Maintenance Service
- CVE-2022-22754 (bmo#1750565) Extensions could have bypassed permission confirmation during update
- CVE-2022-22756 (bmo#1317873) Drag and dropping an image could have resulted in the dropped object being an executable
- CVE-2022-22759 (bmo#1739957) Sandboxed iframes could have executed script if the parent appended elements
- CVE-2022-22760 (bmo#1740985, bmo#1748503) Cross-Origin responses could be distinguished between script and non-script content-types
- CVE-2022-22761 (bmo#1745566) frame-ancestors Content Security Policy directive was not enforced for framed extension pages
- CVE-2022-22763 (bmo#1740534) Script Execution during invalid object state
- CVE-2022-22764 (bmo#1742682, bmo#1744165, bmo#1746545, bmo#1748210, bmo#1748279) Memory safety bugs fixed in Thunderbird 91.6
- Record
openSUSE-SU-2022:0559-1- Updated
- 2026-11-02
Show 8 moreShow less
OSVopenSUSE-SU-2024:11837-1 No score
MozillaFirefox-97.0-1.1 on GA media
These are all security issues fixed in the MozillaFirefox-97.0-1.1 package on the GA media of openSUSE Tumbleweed.
- Record
openSUSE-SU-2024:11837-1- Updated
- 2026-11-02
OSVopenSUSE-SU-2024:11842-1 No score
MozillaThunderbird-91.6.0-1.1 on GA media
These are all security issues fixed in the MozillaThunderbird-91.6.0-1.1 package on the GA media of openSUSE Tumbleweed.
- Record
openSUSE-SU-2024:11842-1- Updated
- 2026-11-02
OSVopenSUSE-SU-2024:14572-1 No score
firefox-esr-128.5.1-1.1 on GA media
These are all security issues fixed in the firefox-esr-128.5.1-1.1 package on the GA media of openSUSE Tumbleweed.
- Record
openSUSE-SU-2024:14572-1- Updated
- 2026-11-02
OSVSUSE-SU-2022:0559-1 No score
Security update for MozillaThunderbird
This update for MozillaThunderbird fixes the following issues:
-
Mozilla Thunderbird 91.6.1 / MFSA 2022-07 (bsc#1196072)
- CVE-2022-0566 (bmo#1753094) Crafted email could trigger an out-of-bounds write
-
Mozilla Thunderbird 91.6 / MFSA 2022-06 (bsc#1195682)
- CVE-2022-22753 (bmo#1732435) Privilege Escalation to SYSTEM on Windows via Maintenance Service
- CVE-2022-22754 (bmo#1750565) Extensions could have bypassed permission confirmation during update
- CVE-2022-22756 (bmo#1317873) Drag and dropping an image could have resulted in the dropped object being an executable
- CVE-2022-22759 (bmo#1739957) Sandboxed iframes could have executed script if the parent appended elements
- CVE-2022-22760 (bmo#1740985, bmo#1748503) Cross-Origin responses could be distinguished between script and non-script content-types
- CVE-2022-22761 (bmo#1745566) frame-ancestors Content Security Policy directive was not enforced for framed extension pages
- CVE-2022-22763 (bmo#1740534) Script Execution during invalid object state
- CVE-2022-22764 (bmo#1742682, bmo#1744165, bmo#1746545, bmo#1748210, bmo#1748279) Memory safety bugs fixed in Thunderbird 91.6
- Record
SUSE-SU-2022:0559-1- Updated
- 2026-11-02
OSVSUSE-SU-2022:0565-1 No score
Security update for MozillaFirefox
This update for MozillaFirefox fixes the following issues:
Firefox Extended Support Release 91.6.0 ESR / MFSA 2022-05 (bsc#1195682)
- CVE-2022-22753: Privilege Escalation to SYSTEM on Windows via Maintenance Service
- CVE-2022-22754: Extensions could have bypassed permission confirmation during update
- CVE-2022-22756: Drag and dropping an image could have resulted in the dropped object being an executable
- CVE-2022-22759: Sandboxed iframes could have executed script if the parent appended elements
- CVE-2022-22760: Cross-Origin responses could be distinguished between script and non-script content-types
- CVE-2022-22761: frame-ancestors Content Security Policy directive was not enforced for framed extension pages
- CVE-2022-22763: Script Execution during invalid object state
- CVE-2022-22764: Memory safety bugs fixed in Firefox 97 and Firefox ESR 91.6
Firefox Extended Support Release 91.5.1 ESR (bsc#1195230)
- Fixed an issue that allowed unexpected data to be submitted in some of our search telemetry
- Record
SUSE-SU-2022:0565-1- Updated
- 2026-11-02
OSVSUSE-SU-2022:0676-1 No score
Security update for MozillaFirefox
This update for MozillaFirefox fixes the following issues:
Firefox Extended Support Release 91.6.0 ESR / MFSA 2022-05 (bsc#1195682)
- CVE-2022-22753: Privilege Escalation to SYSTEM on Windows via Maintenance Service
- CVE-2022-22754: Extensions could have bypassed permission confirmation during update
- CVE-2022-22756: Drag and dropping an image could have resulted in the dropped object being an executable
- CVE-2022-22759: Sandboxed iframes could have executed script if the parent appended elements
- CVE-2022-22760: Cross-Origin responses could be distinguished between script and non-script content-types
- CVE-2022-22761: frame-ancestors Content Security Policy directive was not enforced for framed extension pages
- CVE-2022-22763: Script Execution during invalid object state
- CVE-2022-22764: Memory safety bugs fixed in Firefox 97 and Firefox ESR 91.6
Firefox Extended Support Release 91.5.1 ESR (bsc#1195230)
- Fixed an issue that allowed unexpected data to be submitted in some of our search telemetry
- Record
SUSE-SU-2022:0676-1- Updated
- 2026-11-02
OSVSUSE-SU-2022:0696-1 No score
Security update for MozillaFirefox
This update for MozillaFirefox fixes the following issues:
Firefox Extended Support Release 91.6.0 ESR / MFSA 2022-05 (bsc#1195682)
- CVE-2022-22753: Privilege Escalation to SYSTEM on Windows via Maintenance Service
- CVE-2022-22754: Extensions could have bypassed permission confirmation during update
- CVE-2022-22756: Drag and dropping an image could have resulted in the dropped object being an executable
- CVE-2022-22759: Sandboxed iframes could have executed script if the parent appended elements
- CVE-2022-22760: Cross-Origin responses could be distinguished between script and non-script content-types
- CVE-2022-22761: frame-ancestors Content Security Policy directive was not enforced for framed extension pages
- CVE-2022-22763: Script Execution during invalid object state
- CVE-2022-22764: Memory safety bugs fixed in Firefox 97 and Firefox ESR 91.6
Firefox Extended Support Release 91.5.1 ESR (bsc#1195230)
- Fixed an issue that allowed unexpected data to be submitted in some of our search telemetry
- Record
SUSE-SU-2022:0696-1- Updated
- 2026-11-02
OSVSUSE-SU-2022:14896-1 No score
Security update for MozillaFirefox
This update for MozillaFirefox fixes the following issues:
Firefox Extended Support Release 91.6.0 ESR / MFSA 2022-05 (bsc#1195682)
- CVE-2022-22753: Privilege Escalation to SYSTEM on Windows via Maintenance Service
- CVE-2022-22754: Extensions could have bypassed permission confirmation during update
- CVE-2022-22756: Drag and dropping an image could have resulted in the dropped object being an executable
- CVE-2022-22759: Sandboxed iframes could have executed script if the parent appended elements
- CVE-2022-22760: Cross-Origin responses could be distinguished between script and non-script content-types
- CVE-2022-22761: frame-ancestors Content Security Policy directive was not enforced for framed extension pages
- CVE-2022-22763: Script Execution during invalid object state
- CVE-2022-22764: Memory safety bugs fixed in Firefox 97 and Firefox ESR 91.6
Firefox Extended Support Release 91.5.1 ESR (bsc#1195230)
- Fixed an issue that allowed unexpected data to be submitted in some of our search telemetry
- Record
SUSE-SU-2022:14896-1- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
firefoxAlpine:v3.16 |
before 97.0-r0 | 97.0-r0 |
firefoxAlpine:v3.17 |
before 97.0-r0 | 97.0-r0 |
firefoxAlpine:v3.18 |
before 97.0-r0 | 97.0-r0 |
firefoxAlpine:v3.19 |
before 97.0-r0 | 97.0-r0 |
firefoxAlpine:v3.20 |
before 97.0-r0 | 97.0-r0 |
firefoxAlpine:v3.21 |
before 97.0-r0 | 97.0-r0 |
firefoxAlpine:v3.22 |
before 97.0-r0 | 97.0-r0 |
firefoxAlpine:v3.23 |
before 97.0-r0 | 97.0-r0 |
librewolfAlpine:v3.21 |
before 97.0-r0 | 97.0-r0 |
librewolfAlpine:v3.22 |
before 97.0-r0 | 97.0-r0 |
Show 51 moreShow less
| Package | Affected | Fixed |
|---|---|---|
librewolfAlpine:v3.23 |
before 97.0-r0 | 97.0-r0 |
librewolfAlpine:v3.24 |
before 97.0-r0 | 97.0-r0 |
thunderbirdAlpine:v3.16 |
before 91.6.0-r0 | 91.6.0-r0 |
thunderbirdAlpine:v3.17 |
before 91.6.0-r0 | 91.6.0-r0 |
thunderbirdAlpine:v3.18 |
before 91.6.0-r0 | 91.6.0-r0 |
thunderbirdAlpine:v3.19 |
before 91.6.0-r0 | 91.6.0-r0 |
thunderbirdAlpine:v3.20 |
before 91.6.0-r0 | 91.6.0-r0 |
thunderbirdAlpine:v3.21 |
before 91.6.0-r0 | 91.6.0-r0 |
thunderbirdAlpine:v3.22 |
before 91.6.0-r0 | 91.6.0-r0 |
thunderbirdAlpine:v3.23 |
before 91.6.0-r0 | 91.6.0-r0 |
MozillaThunderbirdSUSE:Linux Enterprise Workstation Extension 15 SP3 From an advisory covering 9 CVEs |
before 91.6.1-8.54.1 | 91.6.1-8.54.1 |
MozillaFirefoxSUSE:HPE Helion OpenStack 8 From an advisory covering 8 CVEs |
before 91.6.0-112.89.1 | 91.6.0-112.89.1 |
MozillaFirefoxSUSE:OpenStack Cloud 8 From an advisory covering 8 CVEs |
before 91.6.0-112.89.1 | 91.6.0-112.89.1 |
MozillaFirefoxSUSE:OpenStack Cloud 9 From an advisory covering 8 CVEs |
before 91.6.0-112.89.1 | 91.6.0-112.89.1 |
MozillaFirefoxSUSE:OpenStack Cloud Crowbar 8 From an advisory covering 8 CVEs |
before 91.6.0-112.89.1 | 91.6.0-112.89.1 |
MozillaFirefoxSUSE:OpenStack Cloud Crowbar 9 From an advisory covering 8 CVEs |
before 91.6.0-112.89.1 | 91.6.0-112.89.1 |
MozillaFirefoxSUSE:Linux Enterprise Server for SAP Applications 12 SP3 From an advisory covering 8 CVEs |
before 91.6.0-112.89.1 | 91.6.0-112.89.1 |
MozillaFirefoxSUSE:Linux Enterprise Server for SAP Applications 12 SP4 From an advisory covering 8 CVEs |
before 91.6.0-112.89.1 | 91.6.0-112.89.1 |
MozillaFirefoxSUSE:Linux Enterprise Software Development Kit 12 SP5 From an advisory covering 8 CVEs |
before 91.6.0-112.89.1 | 91.6.0-112.89.1 |
MozillaFirefoxSUSE:Linux Enterprise Server 12 SP2-BCL From an advisory covering 8 CVEs |
before 91.6.0-112.89.1 | 91.6.0-112.89.1 |
MozillaFirefoxSUSE:Linux Enterprise Server 12 SP3-LTSS From an advisory covering 8 CVEs |
before 91.6.0-112.89.1 | 91.6.0-112.89.1 |
MozillaFirefoxSUSE:Linux Enterprise Server 12 SP3-BCL From an advisory covering 8 CVEs |
before 91.6.0-112.89.1 | 91.6.0-112.89.1 |
MozillaFirefoxSUSE:Linux Enterprise Server 12 SP4-LTSS From an advisory covering 8 CVEs |
before 91.6.0-112.89.1 | 91.6.0-112.89.1 |
MozillaFirefoxSUSE:Linux Enterprise Server 12 SP5 From an advisory covering 8 CVEs |
before 91.6.0-112.89.1 | 91.6.0-112.89.1 |
MozillaFirefoxSUSE:Linux Enterprise Server for SAP Applications 12 SP5 From an advisory covering 8 CVEs |
before 91.6.0-112.89.1 | 91.6.0-112.89.1 |
MozillaFirefoxSUSE:Linux Enterprise High Performance Computing 15-ESPOS From an advisory covering 8 CVEs |
before 91.6.0-150.18.1 | 91.6.0-150.18.1 |
MozillaFirefoxSUSE:Linux Enterprise High Performance Computing 15-LTSS From an advisory covering 8 CVEs |
before 91.6.0-150.18.1 | 91.6.0-150.18.1 |
MozillaFirefoxSUSE:Linux Enterprise High Performance Computing 15 SP1-ESPOS From an advisory covering 8 CVEs |
before 91.6.0-150.18.1 | 91.6.0-150.18.1 |
MozillaFirefoxSUSE:Linux Enterprise High Performance Computing 15 SP1-LTSS From an advisory covering 8 CVEs |
before 91.6.0-150.18.1 | 91.6.0-150.18.1 |
MozillaFirefoxSUSE:Linux Enterprise Server 15-LTSS From an advisory covering 8 CVEs |
before 91.6.0-150.18.1 | 91.6.0-150.18.1 |
MozillaFirefoxSUSE:Linux Enterprise Server 15 SP1-BCL From an advisory covering 8 CVEs |
before 91.6.0-150.18.1 | 91.6.0-150.18.1 |
MozillaFirefoxSUSE:Linux Enterprise Server 15 SP1-LTSS From an advisory covering 8 CVEs |
before 91.6.0-150.18.1 | 91.6.0-150.18.1 |
MozillaFirefoxSUSE:Linux Enterprise Server for SAP Applications 15 From an advisory covering 8 CVEs |
before 91.6.0-150.18.1 | 91.6.0-150.18.1 |
MozillaFirefoxSUSE:Linux Enterprise Server for SAP Applications 15 SP1 From an advisory covering 8 CVEs |
before 91.6.0-150.18.1 | 91.6.0-150.18.1 |
MozillaFirefoxSUSE:Enterprise Storage 6 From an advisory covering 8 CVEs |
before 91.6.0-150.18.1 | 91.6.0-150.18.1 |
MozillaFirefoxSUSE:Linux Enterprise Module for Desktop Applications 15 SP3 From an advisory covering 8 CVEs |
before 91.6.0-152.15.1 | 91.6.0-152.15.1 |
MozillaFirefoxSUSE:Linux Enterprise High Performance Computing 15 SP2-ESPOS From an advisory covering 8 CVEs |
before 91.6.0-152.15.1 | 91.6.0-152.15.1 |
MozillaFirefoxSUSE:Linux Enterprise High Performance Computing 15 SP2-LTSS From an advisory covering 8 CVEs |
before 91.6.0-152.15.1 | 91.6.0-152.15.1 |
MozillaFirefoxSUSE:Linux Enterprise Real Time 15 SP2 From an advisory covering 8 CVEs |
before 91.6.0-152.15.1 | 91.6.0-152.15.1 |
MozillaFirefoxSUSE:Linux Enterprise Server 15 SP2-BCL From an advisory covering 8 CVEs |
before 91.6.0-152.15.1 | 91.6.0-152.15.1 |
MozillaFirefoxSUSE:Linux Enterprise Server 15 SP2-LTSS From an advisory covering 8 CVEs |
before 91.6.0-152.15.1 | 91.6.0-152.15.1 |
MozillaFirefoxSUSE:Linux Enterprise Server for SAP Applications 15 SP2 From an advisory covering 8 CVEs |
before 91.6.0-152.15.1 | 91.6.0-152.15.1 |
MozillaFirefoxSUSE:Manager Proxy 4.1 From an advisory covering 8 CVEs |
before 91.6.0-152.15.1 | 91.6.0-152.15.1 |
MozillaFirefoxSUSE:Manager Retail Branch Server 4.1 From an advisory covering 8 CVEs |
before 91.6.0-152.15.1 | 91.6.0-152.15.1 |
MozillaFirefoxSUSE:Manager Server 4.1 From an advisory covering 8 CVEs |
before 91.6.0-152.15.1 | 91.6.0-152.15.1 |
MozillaFirefoxSUSE:Enterprise Storage 7 From an advisory covering 8 CVEs |
before 91.6.0-152.15.1 | 91.6.0-152.15.1 |
MozillaFirefoxSUSE:Linux Enterprise Server 11 SP4-LTSS From an advisory covering 8 CVEs |
before 91.6.0-78.162.2 | 91.6.0-78.162.2 |
MozillaThunderbirdopenSUSE:Leap 15.3 From an advisory covering 9 CVEs |
before 91.6.1-8.54.1 | 91.6.1-8.54.1 |
MozillaFirefoxopenSUSE:Tumbleweed From an advisory covering 12 CVEs |
before 97.0-1.1 | 97.0-1.1 |
MozillaThunderbirdopenSUSE:Tumbleweed From an advisory covering 8 CVEs |
before 91.6.0-1.1 | 91.6.0-1.1 |
firefox-esropenSUSE:Tumbleweed From an advisory covering 1860 CVEs |
before 128.5.1-1.1 | 128.5.1-1.1 |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| affected, aliases, references | OSV | |
| first indexed | CVE List, EUVD, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2022-22753 is a high vulnerability (CVSS 7.1) in Mozilla Firefox, published February 23, 2022. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.65%, the 51st percentile. Fixed in firefox 97.0-r0.
References
mozilla.org/security/advisories/mfsa2022-05
bugzilla.mozilla.org/show_bug.cgi?id=1732435
nvd.nist.gov/vuln/detail/CVE-2022-22753
github.com/advisories/GHSA-pr6h-wqwg-8wxx
Show 194 moreShow less
security.alpinelinux.org/vuln/CVE-2022-22753
suse.com/support/update/announcement/2022/suse-su-20220559-1
bugzilla.suse.com/1195682
lists.opensuse.org/archives/list/[email protected]/thread/GSM3MOVKIHQAE33NLCNX7MUULCOLEADF
This page doesn't list everything
Left out here: 1,679 references. The JSON record has them.