PT-2022-2164

CVE-2022-28289

·

Published

2022-04-05

·

Updated

2026-10-31

Description by

CVSS 3.1
8.8
High
MetricsAV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions Thunderbird versions prior to 91.8 Firefox versions prior to 99 Firefox ESR versions prior to 91.8
Description The issue is related to memory safety bugs and buffer overflow, which can lead to memory corruption. It is presumed that with enough effort, these bugs could be exploited to run arbitrary code. The vulnerability can be exploited by a remote attacker using a specially crafted web page, potentially allowing them to execute arbitrary code on the target system.
Recommendations For Thunderbird versions prior to 91.8, update to version 91.8 or later. For Firefox versions prior to 99, update to version 99 or later. For Firefox ESR versions prior to 91.8, update to version 91.8 or later.
Exploitability
Exploit
Fix
Impacts
Vendors
Affected products
Related identifiers
ALSA-2022:1287
ALSA-2022:1301
ALT-PU-2022-1642
ALT-PU-2022-1809
ALT-PU-2022-1847
ALT-PU-2022-1855
ALT-PU-2022-1941
ALT-PU-2022-1951
ALT-PU-2022-1983
ALT-PU-2022-2044
ALT-PU-2022-2053
ALT-PU-2022-2458
ALT-PU-2022-2929
ALT-PU-2022-2930
ALT-PU-2023-1138
ALT-PU-2023-1139
ALT-PU-2023-4336
ALT-PU-2023-4339
CESA-2022_1287
CESA-2022_1301
CLEANSTART-2024-QY27166
CLEANSTART-2024-WQ23056
DLA-2971-1
DLA-2978-1
DSA-5113-1
DSA-5118-1
MGASA-2022-0156
MGASA-2022-0157
OESA-2023-1673
OESA-2023-1674
OPENSUSE-SU-2022:1127-1
OPENSUSE-SU-2022_1127-1
OPENSUSE-SU-2022_1176-1
OPENSUSE-SU-2024:11975-1
OPENSUSE-SU-2024:14572-1
RHSA-2022:1283
RHSA-2022:1284
RHSA-2022_1284
RHSA-2022:1285
RHSA-2022:1286
RHSA-2022:1287
RHSA-2022_1287
RHSA-2022:1301
RHSA-2022_1301
RHSA-2022:1302
RHSA-2022_1302
RHSA-2022:1303
RHSA-2022:1305
RHSA-2022:1326
RLSA-2022:1287
RLSA-2022:1301
SUSE-RU-2022:1114-1
SUSE-RU-2022:1125-1
SUSE-RU-2022:14935-1
SUSE-SU-2022:1127-1
SUSE-SU-2022:1176-1
USN-5370-1
USN-5393-1
Found an issue in the description? Have something to add? Feel free to write us 👾