CVE-2022-36320

CriticalCVSS 9.8/10Last modified Jun 17, 2026

Description

Mozilla developers and the Mozilla Fuzzing Team reported memory safety bugs present in Firefox 102. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Firefox < 103.

Metrics

CVSS 3.1 9.8/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-787

Affected software

No affected versions have been published.

Timeline

Published
Dec 22, 2022
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2022

CVE-2022-363216.5In JetBrains TeamCity before 2022.04.2 the private SSH key could be written to the build log in some casesCVE-2022-363228.8In JetBrains TeamCity before 2022.04.2 build parameter injection was possibleCVE-2022-363239.1Affected devices do not properly sanitize an input field. This could allow an authenticated remote attacker with administrative privileges CVE-2022-363247.5Affected devices do not properly handle the renegotiation of SSL/TLS parameters. This could allow an unauthenticated remote attacker to bypaCVE-2022-363254.8Affected devices do not properly sanitize data introduced by an user when rendering the web interface. This could allow an authenticated remCVE-2022-363264.9An uncontrolled resource consumption vulnerability issue that could arise by sending crafted requests to a service to consume a large amountCVE-2022-363279.8Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability that could allow an attacker to write files to CVE-2022-363284.9Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability that could allow an attacker to create arbitrarCVE-2022-363297.5An improper privilege management issue that could allow an attacker to cause a denial of service over the OTA mechanism was discovered in WeCVE-2022-36333.3A vulnerability classified as problematic has been found in Linux Kernel. Affected is the function j1939_session_destroy of the file net/canCVE-2022-363308.1A buffer overflow vulnerability was discovered on firmware version validation that could lead to an unauthenticated remote code execution inCVE-2022-363317.5Western Digital My Cloud, My Cloud Home, My Cloud Home Duo, and SanDisk ibi devices were vulnerable to an impersonation attack that could al
CVE-2022-36320: Critical severity, CVSS 9.8 | Vulnix