vulnerability

MFSA2022-44 Firefox: Security Vulnerabilities fixed in Firefox 106 (CVE-2022-46885)

Try Surface Command

Back to search

Severity

CVSS

(AV:N/AC:M/Au:N/C:C/I:C/A:C)

Published

Oct 18, 2022

Added

Dec 14, 2022

Modified

Mar 27, 2026

Description

Mozilla developers Timothy Nikkel, Ashley Hale, and the Mozilla Fuzzing Team reported memory safety bugs present in Firefox 105. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Firefox < 106.

Solution

mozilla-firefox-upgrade-106_0

References

CVE-2022-46885
https://attackerkb.com/topics/CVE-2022-46885
CWE-787
EUVD-EUVD-2022-49665
http://www.mozilla.org/security/announce/2022/mfsa2022-44.html
https://euvd.enisa.europa.eu/vulnerability/EUVD-2022-49665

Rapid7 Labs

2026 Global Threat Landscape Report

The predictive window has collapsed. Exploitation follows disclosure in days. See how attackers are accelerating and how to stay ahead.

Get report