CVE-2022-22740

HighCVSS 8.8/10Last modified Jun 17, 2026

Description

Certain network request objects were freed too early when releasing a network request handle. This could have lead to a use-after-free causing a potentially exploitable crash. This vulnerability affects Firefox ESR < 91.5, Firefox < 96, and Thunderbird < 91.5.

Metrics

CVSS 3.1 8.8/10CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-416

Affected software

Vendor	Product	Versions
Mozilla	Firefox ESR	>= unspecified, < 91.5
Mozilla	Firefox	>= unspecified, < 96
Mozilla	Thunderbird	>= unspecified, < 91.5

References

https://bugzilla.mozilla.org/show_bug.cgi?id=1742334Exploit, Issue Tracking, Vendor Advisory
https://www.mozilla.org/security/advisories/mfsa2022-01/Vendor Advisory
https://www.mozilla.org/security/advisories/mfsa2022-02/Vendor Advisory
https://www.mozilla.org/security/advisories/mfsa2022-03/Vendor Advisory
https://bugzilla.mozilla.org/show_bug.cgi?id=1742334Exploit, Issue Tracking, Vendor Advisory
https://www.mozilla.org/security/advisories/mfsa2022-01/Vendor Advisory
https://www.mozilla.org/security/advisories/mfsa2022-02/Vendor Advisory
https://www.mozilla.org/security/advisories/mfsa2022-03/Vendor Advisory

Timeline

Published: Dec 22, 2022
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2022

CVE-2022-227417.5When resizing a popup while requesting fullscreen access, the popup would have become unable to leave fullscreen mode. This vulnerability af CVE-2022-227426.5When inserting text while in edit mode, some characters might have lead to out-of-bounds memory access causing a potentially exploitable cra CVE-2022-227434.3When navigating from inside an iframe while requesting fullscreen access, an attacker-controlled tab could have made the browser unable to l CVE-2022-227448.8The constructed curl command from the "Copy as curl" feature in DevTools was not properly escaped for PowerShell. This could have lead to co CVE-2022-227456.5Securitypolicyviolation events could have leaked cross-origin information for frame-ancestors violations. This vulnerability affects Firefox CVE-2022-227465.9A race condition could have allowed bypassing the fullscreen notification which could have lead to a fullscreen window spoof being unnoticed CVE-2022-227476.5After accepting an untrusted certificate, handling an empty pkcs7 sequence as part of the certificate data could have lead to a crash. This CVE-2022-227486.5Malicious websites could have confused Firefox into showing the wrong origin when asking to launch a program and handling an external URL pr CVE-2022-227494.3When scanning QR codes, Firefox for Android would have allowed navigation to some URLs that do not point to web content.<br>*This bug only a CVE-2022-22754.3The WP Edit Menu WordPress plugin before 1.5.0 does not have CSRF in an AJAX action, which could allow attackers to make a logged in admin d CVE-2022-227506.5By generally accepting and passing resource handles across processes, a compromised content process might have confused higher privileged pr CVE-2022-227518.8Mozilla developers Calixte Denizet, Kershaw Chang, Christian Holler, Jason Kratzer, Gabriele Svelto, Tyson Smith, Simon Giesecke, and Steve