Thursday, April 7, 2022

MFSA2022-14 Firefox: Security Vulnerabilities fixed in Firefox ESR 91.8 (CVE-2022-1196)

rapid7 vulnerabilities In: rapid7, vulnerabilities

Description
After a VR Process is destroyed, a reference to it may have been retained and used, leading to a use-after-free and potentially exploitable crash.
Solution(s)
mozilla-firefox-esr-upgrade-91_8


Referenceshttps://attackerkb.com/topics/cve-2022-1196
CVE - 2022-1196
http://www.mozilla.org/security/announce/2022/mfsa2022-14.html