Mozilla Firefox und Mozilla Firefox ESR: Mehrere Schwachstellen

Summary

Product

Vulnerabilities 9

• Critical 9.8
  CVE-2022-29917

  Mozilla developers Andrew McCreight, Gabriele Svelto, Tom Ritter and the Mozilla Fuzzing Team reported memory safety bu…

  Mozilla Firefox Thunderbird Firefox ESR Browsers Debian Ubuntu Alpine
  Dec 22, 2022
• High 8.8
  CVE-2022-29909

  Documents in deeply-nested cross-origin browsing contexts could have obtained permissions granted to the top-level orig…

  Mozilla Firefox Thunderbird Firefox ESR Browsers Debian Ubuntu Alpine
  Dec 22, 2022
• High 8.8
  CVE-2022-29918

  Mozilla developers Gabriele Svelto, Randell Jesup and the Mozilla Fuzzing Team reported memory safety bugs present in F…

  Mozilla Firefox mozjs38 mozjs52 Browsers Ubuntu Alpine
  Dec 22, 2022
• Medium 6.5
  CVE-2022-29914

  When reusing existing popups Firefox would have allowed them to cover the fullscreen notification UI, which could have …

  Mozilla Firefox Thunderbird Firefox ESR Browsers Debian Ubuntu Alpine
  Dec 22, 2022
• Medium 6.5
  CVE-2022-29916

  Firefox behaved slightly differently for already known resources when loading CSS resources involving CSS variables. Th…

  Mozilla Firefox Thunderbird Firefox ESR Browsers Debian Ubuntu Alpine
  Dec 22, 2022
• Medium 6.1
  CVE-2022-29910

  When closed or sent to the background, Firefox for Android would not properly record and persist HSTS settings.<br>*Not…

  Mozilla Firefox librewolf firefox Browsers Alpine
  Dec 22, 2022
• Medium 6.1
  CVE-2022-29911

  An improper implementation of the new iframe sandbox keyword <code>allow-top-navigation-by-user-activation</code> could…

  Mozilla Firefox Thunderbird Firefox ESR Browsers Debian Ubuntu Alpine
  Dec 22, 2022
• Medium 6.1
  CVE-2022-29912

  Requests initiated through reader mode did not properly omit cookies with a SameSite attribute. This vulnerability affe…

  Mozilla Firefox Thunderbird Firefox ESR Browsers Debian Ubuntu Alpine
  Dec 22, 2022
• Medium 4.3
  CVE-2022-29915

  The Performance API did not properly hide the fact whether a request cross-origin resource has observed redirects. This…

  Mozilla Firefox firefox firefox Browsers Ubuntu Alpine
  Dec 22, 2022

Revision history

1. 2025-04-01 #11

   Neue Updates von Amazon aufgenommen

2. 2023-01-01 #10

   PoC aufgenommen

3. 2022-07-03 #9

   Neue Updates von Oracle Linux aufgenommen

4. 2022-05-19 #8

   Neue Updates von SUSE und Red Hat aufgenommen

5. 2022-05-18 #7

   Neue Updates von SUSE aufgenommen

6. 2022-05-16 #6

   Neue Updates von Arch Linux aufgenommen

7. 2022-05-11 #5

   Neue Updates von Ubuntu aufgenommen

8. 2022-05-08 #4

   Neue Updates von CentOS aufgenommen

9. 2022-05-05 #3

   Neue Updates von Debian aufgenommen

10. 2022-05-04 #2

    Neue Updates von Oracle Linux und Red Hat aufgenommen

11. 2022-05-03 #1

    Initiale Fassung

References

• Mozilla Security Advisory vom 2022-05-03
  https://www.mozilla.org/en-US/security/advisories/mfsa2022-16/
• Mozilla Security Advisory vom 2022-05-03
  https://www.mozilla.org/en-US/security/advisories/mfsa2022-17/
• Oracle Linux Security Advisory ELSA-2022-1703 vom 2022-05-04
  http://linux.oracle.com/errata/ELSA-2022-1703.html
• Oracle Linux Security Advisory ELSA-2022-1705 vom 2022-05-04
  http://linux.oracle.com/errata/ELSA-2022-1705.html
• Red Hat Security Advisory RHSA-2022:1702 vom 2022-05-04
  https://access.redhat.com/errata/RHSA-2022:1702
• Red Hat Security Advisory RHSA-2022:1703 vom 2022-05-04
  https://access.redhat.com/errata/RHSA-2022:1703
• Red Hat Security Advisory RHSA-2022:1704 vom 2022-05-04
  https://access.redhat.com/errata/RHSA-2022:1704
• Red Hat Security Advisory RHSA-2022:1705 vom 2022-05-04
  https://access.redhat.com/errata/RHSA-2022:1705
• Red Hat Security Advisory RHSA-2022:1701 vom 2022-05-04
  https://access.redhat.com/errata/RHSA-2022:1701
• Debian Security Advisory DSA-5129 vom 2022-05-04
  https://lists.debian.org/debian-security-announce/2022/msg00097.html
• Debian Security Advisory DLA-2994 vom 2022-05-05
  https://lists.debian.org/debian-lts-announce/2022/05/msg00004.html
• CentOS Security Advisory CESA-2022:1703 vom 2022-05-06
  https://lists.centos.org/pipermail/centos-announce/2022-May/073581.html
• Ubuntu Security Notice USN-5411-1 vom 2022-05-11
  https://ubuntu.com/security/notices/USN-5411-1
• Arch Linux Security Advisory ASA-202205-4 vom 2022-05-17
  https://security.archlinux.org/ASA-202205-4
• SUSE Security Update SUSE-SU-2022:1731-1 vom 2022-05-18
  https://lists.suse.com/pipermail/sle-security-updates/2022-May/011084.html
• SUSE Security Update SUSE-SU-2022:1757-1 vom 2022-05-19
  https://lists.suse.com/pipermail/sle-security-updates/2022-May/011097.html
• SUSE Security Update SUSE-SU-2022:1748-1 vom 2022-05-19
  https://lists.suse.com/pipermail/sle-security-updates/2022-May/011093.html
• Red Hat Security Advisory RHSA-2022:4590 vom 2022-05-20
  https://access.redhat.com/errata/RHSA-2022:4590
• Oracle Linux Security Advisory ELSA-2022-4590 vom 2022-07-01
  http://linux.oracle.com/errata/ELSA-2022-4590.html
• Mozilla Bugzilla vom 2023-01-01
  https://bugzilla.mozilla.org/show_bug.cgi?id=1760674
• Amazon Linux Security Advisory ALAS-2025-2807 vom 2025-04-02
  https://alas.aws.amazon.com/AL2/ALAS-2025-2807.html
• Amazon Linux Security Advisory ALASFIREFOX-2025-036 vom 2025-04-01
  https://alas.aws.amazon.com/AL2/ALASFIREFOX-2025-036.html