Security
Loading…

CVE-2022-26485

HIGHCVSS 8.8Known Exploited
Description

Mozilla Firefox contains a use-after-free vulnerability in XSLT parameter processing which can be exploited to perform arbitrary code execution.

Timeline
Published:December 22nd, 2022 8:15 PM
Last modified:August 19th, 2026 3:29 PM
Added to KEV:March 7th, 2022
CVSS Scoring

CVSS v3: 8.8 (HIGH)

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Affected Software
From NVD CPE configuration data

Vendors

mozilla

Products

firefoxfirefox_focusfirefox_mobilethunderbird
Weaknesses (CWE)

Source: NIST NVD · Data may lag official sources by up to one minute