Friday, April 8, 2022

MFSA2022-13 Firefox: Security Vulnerabilities fixed in Firefox 99 (CVE-2022-28281)

rapid7 vulnerabilities In: rapid7, vulnerabilities

Description
If a compromised content process sent an unexpected number of WebAuthN Extensions in a Register command to the parent process, an out of bounds write would have occurred leading to memory corruption and a potentially exploitable crash.
Solution(s)
mozilla-firefox-upgrade-99_0


Referenceshttps://attackerkb.com/topics/cve-2022-28281
CVE - 2022-28281
http://www.mozilla.org/security/announce/2022/mfsa2022-13.html