vulnerability

Gentoo Linux: CVE-2022-46872: Mozilla Firefox: Multiple Vulnerabilities

Try Surface Command

Back to search

Severity

CVSS

(AV:N/AC:L/Au:N/C:C/I:N/A:N)

Published

Dec 22, 2022

Added

May 4, 2023

Modified

Mar 31, 2026

Description

An attacker who compromised a content process could have partially escaped the sandbox to read arbitrary files via clipboard-related IPC messages.<br>*This bug only affects Thunderbird for Linux. Other operating systems are unaffected.*. This vulnerability affects Firefox < 108, Firefox ESR < 102.6, and Thunderbird < 102.6.

Solutions

gentoo-linux-upgrade-mail-client-thunderbirdgentoo-linux-upgrade-mail-client-thunderbird-bingentoo-linux-upgrade-www-client-firefoxgentoo-linux-upgrade-www-client-firefox-bin

References

CVE-2022-46872
https://attackerkb.com/topics/CVE-2022-46872
CWE-125
EUVD-EUVD-2022-49652
GENTOO-202305-06
GENTOO-202305-13
https://euvd.enisa.europa.eu/vulnerability/EUVD-2022-49652

Rapid7 Labs

2026 Global Threat Landscape Report

The predictive window has collapsed. Exploitation follows disclosure in days. See how attackers are accelerating and how to stay ahead.

Get report