CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
Showing 1โ1 of 1 advisories (Page 1/1)
2022-12-22
Mozilla Firefox and Thunderbird XSLT Use-After-Free Remote Code Execution Vulnerability (CVE-2022-26485) Emergency Security Advisory
[Affected Scope] Firefox < 97.0.2, Firefox ESR < 91.6.1, Firefox for Android < 97.3.0, Thunderbird < 91.6.2, and Focus < 97.3.0
[Impact] Remote attackers can trigger memory corruption via a crafted XSLT stylesheet to execute arbitrary code on the target system, with active exploitation reported in the wild
[Mitigation] Immediately update all affected Mozilla products to their respective patched versions (Firefox 97.0.2+, Firefox ESR 91.6.1+, Thunderbird 91.6.2+, etc.)