vulnerability

MFSA2022-24 Firefox: Security Vulnerabilities fixed in Firefox 102 (CVE-2022-2200)

Try Surface Command

Back to search

Severity

CVSS

(AV:N/AC:M/Au:N/C:C/I:C/A:C)

Published

Jun 28, 2022

Added

Jun 29, 2022

Modified

Mar 27, 2026

Description

If an object prototype was corrupted by an attacker, they would have been able to set undesired attributes on a JavaScript object, leading to privileged code execution. This vulnerability affects Firefox < 102, Firefox ESR < 91.11, Thunderbird < 102, and Thunderbird < 91.11.

Solution

mozilla-firefox-upgrade-102_0

References

CVE-2022-2200
https://attackerkb.com/topics/CVE-2022-2200
CWE-1321
EUVD-EUVD-2022-34483
http://www.mozilla.org/security/announce/2022/mfsa2022-24.html
https://euvd.enisa.europa.eu/vulnerability/EUVD-2022-34483

Rapid7 Labs

2026 Global Threat Landscape Report

The predictive window has collapsed. Exploitation follows disclosure in days. See how attackers are accelerating and how to stay ahead.

Get report