Sunday, April 10, 2022

MFSA2022-13 Firefox: Security Vulnerabilities fixed in Firefox 99 (CVE-2022-1097)

rapid7 vulnerabilities In: rapid7, vulnerabilities

Description
NSSToken objects were referenced via direct points, and could have been accessed in an unsafe way on different threads, leading to a use-after-free and potentially exploitable crash.
Solution(s)
mozilla-firefox-upgrade-99_0


Referenceshttps://attackerkb.com/topics/cve-2022-1097
CVE - 2022-1097
http://www.mozilla.org/security/announce/2022/mfsa2022-13.html