vulnerability

MFSA2022-24 Firefox: Security Vulnerabilities fixed in Firefox 102 (CVE-2022-34479)

Try Surface Command

Back to search

Severity

CVSS

(AV:N/AC:M/Au:N/C:N/I:C/A:N)

Published

Jun 28, 2022

Added

Jun 29, 2022

Modified

Mar 27, 2026

Description

A malicious website that could create a popup could have resized the popup to overlay the address bar with its own content, resulting in potential user confusion or spoofing attacks. <br>*This bug only affects Thunderbird for Linux. Other operating systems are unaffected.*. This vulnerability affects Firefox < 102, Firefox ESR < 91.11, Thunderbird < 102, and Thunderbird < 91.11.

Solution

mozilla-firefox-upgrade-102_0

References

CVE-2022-34479
https://attackerkb.com/topics/CVE-2022-34479
CWE-451
EUVD-EUVD-2022-37434
http://www.mozilla.org/security/announce/2022/mfsa2022-24.html
https://euvd.enisa.europa.eu/vulnerability/EUVD-2022-37434

Rapid7 Labs

2026 Global Threat Landscape Report

The predictive window has collapsed. Exploitation follows disclosure in days. See how attackers are accelerating and how to stay ahead.

Get report