vulnerability
MFSA2022-20 Firefox: Security Vulnerabilities fixed in Firefox 101 (CVE-2022-31738)
| Severity | CVSS | Published | Added | Modified |
|---|---|---|---|---|
| 7 | (AV:N/AC:M/Au:N/C:N/I:C/A:N) | May 31, 2022 | Jun 1, 2022 | Mar 27, 2026 |
Severity
7
CVSS
(AV:N/AC:M/Au:N/C:N/I:C/A:N)
Published
May 31, 2022
Added
Jun 1, 2022
Modified
Mar 27, 2026
Description
When exiting fullscreen mode, an iframe could have confused the browser about the current state of fullscreen, resulting in potential user confusion or spoofing attacks. This vulnerability affects Thunderbird < 91.10, Firefox < 101, and Firefox ESR < 91.10.
Solution
mozilla-firefox-upgrade-101_0
Rapid7 Labs
2026 Global Threat Landscape Report
The predictive window has collapsed. Exploitation follows disclosure in days. See how attackers are accelerating and how to stay ahead.