vulnerability

VMware Photon OS: CVE-2022-46875

Try Surface Command

Back to search

Severity

CVSS

(AV:N/AC:M/Au:N/C:N/I:C/A:N)

Published

Dec 22, 2022

Added

Jan 20, 2025

Modified

Mar 25, 2026

Description

The executable file warning was not presented when downloading .atloc and .ftploc files, which can run commands on a user's computer. <br>*Note: This issue only affected Mac OS operating systems. Other operating systems are unaffected.*. This vulnerability affects Firefox < 108, Firefox ESR < 102.6, and Thunderbird < 102.6.

Solution

vmware-photon_os_update_tdnf

References

CVE-2022-46875
https://attackerkb.com/topics/CVE-2022-46875
CWE-287
EUVD-EUVD-2022-49655
https://euvd.enisa.europa.eu/vulnerability/EUVD-2022-49655

Rapid7 Labs

2026 Global Threat Landscape Report

The predictive window has collapsed. Exploitation follows disclosure in days. See how attackers are accelerating and how to stay ahead.

Get report