Monday, April 11, 2022

MFSA2022-13 Firefox: Security Vulnerabilities fixed in Firefox 99 (CVE-2022-28282)

rapid7 vulnerabilities In: rapid7, vulnerabilities

Description
By using a link with rel="localization" a use-after-free could have been triggered by destroying an object during JavaScript execution and then referencing the object through a freed pointer, leading to a potentially exploitable crash.
Solution(s)
mozilla-firefox-upgrade-99_0


Referenceshttps://attackerkb.com/topics/cve-2022-28282
CVE - 2022-28282
http://www.mozilla.org/security/announce/2022/mfsa2022-13.html