CVE-2022-29914

MediumCVSS 6.5/10Last modified Jun 17, 2026

Description

When reusing existing popups Firefox would have allowed them to cover the fullscreen notification UI, which could have enabled browser spoofing attacks. This vulnerability affects Thunderbird < 91.9, Firefox ESR < 91.9, and Firefox < 100.

Metrics

CVSS 3.1 6.5/10CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N

Weakness enumeration

CWE-1021

Affected software

No affected versions have been published.

Timeline

Published
Dec 22, 2022
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2022

CVE-2022-299154.3The Performance API did not properly hide the fact whether a request cross-origin resource has observed redirects. This vulnerability affectCVE-2022-299166.5Firefox behaved slightly differently for already known resources when loading CSS resources involving CSS variables. This could have been usCVE-2022-299179.8Mozilla developers Andrew McCreight, Gabriele Svelto, Tom Ritter and the Mozilla Fuzzing Team reported memory safety bugs present in FirefoxCVE-2022-299188.8Mozilla developers Gabriele Svelto, Randell Jesup and the Mozilla Fuzzing Team reported memory safety bugs present in Firefox 99. Some of thCVE-2022-299197.8Use after free in the Intel(R) VROC software before version 7.7.6.1003 may allow an authenticated user to potentially enable escalation of pCVE-2022-29929.9A vulnerability in GitLab CE/EE affecting all versions from 11.10 prior to 15.1.6, 15.2 to 15.2.4, 15.3 to 15.3.2 allows an authenticated usCVE-2022-299227.5Improper Input Validation vulnerability in the handling of a specially crafted IEC 61850 packet with a valid data item but with incorrect daCVE-2022-299234.8Cross-site Scripting (XSS) vulnerability in ThingsForRestaurants Quick Restaurant Reservations (WordPress plugin) allows Reflected XSS.This CVE-2022-299257.8Access of uninitialized pointer vulnerability exists in the simulator module contained in the graphic editor 'V-SFT' versions prior to v6.1.CVE-2022-299276.1In JetBrains TeamCity before 2022.04 reflected XSS on the Build Chain Status page was possibleCVE-2022-299284.9In JetBrains TeamCity before 2022.04 leak of secrets in TeamCity agent logs was possibleCVE-2022-299296.1In JetBrains TeamCity before 2022.04 potential XSS via Referrer header was possible
CVE-2022-29914: Medium severity, CVSS 6.5 | Vulnix