PT-2022-15656
CVE-2022-22750
·
Published
2022-01-11
·
Updated
2026-10-31
Description by
CVSS 3.1
6.5
MediumMetricsAV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
Name of the Vulnerable Software and Affected Versions
Firefox versions prior to 96
Description
A compromised content process could confuse higher privileged processes into interacting with resource handles that the unprivileged process should not have access to, by generally accepting and passing resource handles across processes. This issue only affects Firefox for Windows and MacOS, with other operating systems being unaffected.
Recommendations
For Firefox versions prior to 96, update to version 96 or later to resolve the issue. As a temporary workaround, consider restricting interactions between processes to minimize the risk of exploitation.
Found an issue in the description? Have something to add? Feel free to write us 👾