Vulnerability-Lookup

UBUNTU-CVE-2022-1529 (CVE-2022-1529)

Vulnerability from osv_ubuntu – Published: 2022-05-23 00:00 – Updated: 2026-04-22 07:41 – Source website

Details

An attacker could have sent a message to the parent process where the contents were used to double-index into a JavaScript object, leading to prototype pollution and ultimately attacker-controlled JavaScript executing in the privileged parent process. This vulnerability affects Firefox ESR < 91.9.1, Firefox < 100.0.2, Firefox for Android < 100.3.0, and Thunderbird < 91.9.1.

Severity

8.8 (High)


                    
                      CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

8.8 (High)


                    
                      CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

N/A (UNKNOWN)


                    
                      medium

References

URL

Type

	https://ubuntu.com/security/CVE-2022-1529	REPORT
	https://www.mozilla.org/en-US/security/advisories…	REPORT
	https://ubuntu.com/security/notices/USN-5434-1	ADVISORY
	https://ubuntu.com/security/notices/USN-5435-1	ADVISORY
	https://www.cve.org/CVERecord?id=CVE-2022-1529	REPORT

JSON

To clipboard

{
  "affected": [
    {
      "ecosystem_specific": {
        "availability": "No subscription required",
        "binaries": [
          {
            "binary_name": "firefox",
            "binary_version": "100.0.2+build1-0ubuntu0.18.04.1"
          },
          {
            "binary_name": "firefox-geckodriver",
            "binary_version": "100.0.2+build1-0ubuntu0.18.04.1"
          },
          {
            "binary_name": "firefox-mozsymbols",
            "binary_version": "100.0.2+build1-0ubuntu0.18.04.1"
          }
        ]
      },
      "package": {
        "ecosystem": "Ubuntu:18.04:LTS",
        "name": "firefox",
        "purl": "pkg:deb/ubuntu/firefox@100.0.2+build1-0ubuntu0.18.04.1?arch=source\u0026distro=bionic"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "100.0.2+build1-0ubuntu0.18.04.1"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "56.0+build6-0ubuntu1",
        "57.0.1+build2-0ubuntu1",
        "59.0.1+build1-0ubuntu1",
        "59.0.2+build1-0ubuntu1",
        "60.0+build2-0ubuntu1",
        "60.0.1+build2-0ubuntu0.18.04.1",
        "60.0.2+build1-0ubuntu0.18.04.1",
        "61.0+build3-0ubuntu0.18.04.1",
        "61.0.1+build1-0ubuntu0.18.04.1",
        "62.0+build2-0ubuntu0.18.04.3",
        "62.0+build2-0ubuntu0.18.04.4",
        "62.0+build2-0ubuntu0.18.04.5",
        "62.0.3+build1-0ubuntu0.18.04.1",
        "63.0+build2-0ubuntu0.18.04.2",
        "63.0.3+build1-0ubuntu0.18.04.1",
        "64.0+build3-0ubuntu0.18.04.1",
        "65.0+build2-0ubuntu0.18.04.1",
        "65.0.1+build2-0ubuntu0.18.04.1",
        "66.0+build3-0ubuntu0.18.04.1",
        "66.0.1+build1-0ubuntu0.18.04.1",
        "66.0.2+build1-0ubuntu0.18.04.1",
        "66.0.3+build1-0ubuntu0.18.04.1",
        "66.0.4+build3-0ubuntu0.18.04.1",
        "66.0.5+build1-0ubuntu0.18.04.1",
        "67.0+build2-0ubuntu0.18.04.1",
        "67.0.1+build1-0ubuntu0.18.04.1",
        "67.0.2+build2-0ubuntu0.18.04.1",
        "67.0.3+build1-0ubuntu0.18.04.1",
        "67.0.4+build1-0ubuntu0.18.04.1",
        "68.0+build3-0ubuntu0.18.04.1",
        "68.0.1+build1-0ubuntu0.18.04.1",
        "68.0.2+build1-0ubuntu0.18.04.1",
        "69.0+build2-0ubuntu0.18.04.1",
        "69.0.1+build1-0ubuntu0.18.04.1",
        "69.0.2+build1-0ubuntu0.18.04.1",
        "70.0+build2-0ubuntu0.18.04.1",
        "70.0.1+build1-0ubuntu0.18.04.1",
        "71.0+build5-0ubuntu0.18.04.1",
        "72.0.1+build1-0ubuntu0.18.04.1",
        "72.0.2+build1-0ubuntu0.18.04.1",
        "73.0+build3-0ubuntu0.18.04.1",
        "73.0.1+build1-0ubuntu0.18.04.1",
        "74.0+build3-0ubuntu0.18.04.1",
        "74.0.1+build1-0ubuntu0.18.04.1",
        "75.0+build3-0ubuntu0.18.04.1",
        "76.0+build2-0ubuntu0.18.04.1",
        "76.0.1+build1-0ubuntu0.18.04.1",
        "77.0.1+build1-0ubuntu0.18.04.1",
        "78.0.1+build1-0ubuntu0.18.04.1",
        "78.0.2+build2-0ubuntu0.18.04.1",
        "79.0+build1-0ubuntu0.18.04.1",
        "80.0+build2-0ubuntu0.18.04.1",
        "80.0.1+build1-0ubuntu0.18.04.1",
        "81.0+build2-0ubuntu0.18.04.1",
        "81.0.2+build1-0ubuntu0.18.04.1",
        "82.0+build2-0ubuntu0.18.04.1",
        "82.0.2+build1-0ubuntu0.18.04.1",
        "82.0.3+build1-0ubuntu0.18.04.1",
        "83.0+build2-0ubuntu0.18.04.2",
        "84.0+build3-0ubuntu0.18.04.1",
        "84.0.1+build1-0ubuntu0.18.04.1",
        "84.0.2+build1-0ubuntu0.18.04.1",
        "85.0+build1-0ubuntu0.18.04.1",
        "85.0.1+build1-0ubuntu0.18.04.1",
        "86.0+build3-0ubuntu0.18.04.1",
        "86.0.1+build1-0ubuntu0.18.04.1",
        "87.0+build3-0ubuntu0.18.04.2",
        "88.0+build2-0ubuntu0.18.04.2",
        "88.0.1+build1-0ubuntu0.18.04.2",
        "89.0+build2-0ubuntu0.18.04.2",
        "89.0.1+build1-0ubuntu0.18.04.1",
        "89.0.2+build1-0ubuntu0.18.04.1",
        "90.0+build1-0ubuntu0.18.04.1",
        "90.0.2+build1-0ubuntu0.18.04.1",
        "91.0+build2-0ubuntu0.18.04.1",
        "91.0.1+build1-0ubuntu0.18.04.1",
        "91.0.2+build1-0ubuntu0.18.04.1",
        "92.0+build3-0ubuntu0.18.04.1",
        "93.0+build1-0ubuntu0.18.04.1",
        "94.0+build3-0ubuntu0.18.04.1",
        "95.0+build1-0ubuntu0.18.04.1",
        "95.0.1+build2-0ubuntu0.18.04.1",
        "96.0+build2-0ubuntu0.18.04.1",
        "97.0+build2-0ubuntu0.18.04.1",
        "97.0.2+build1-0ubuntu0.18.04.1",
        "98.0+build3-0ubuntu0.18.04.2",
        "98.0.1+build2-0ubuntu0.18.04.1",
        "98.0.2+build1-0ubuntu0.18.04.1",
        "99.0+build2-0ubuntu0.18.04.2",
        "100.0+build2-0ubuntu0.18.04.1"
      ]
    },
    {
      "ecosystem_specific": {
        "availability": "No subscription required",
        "binaries": [
          {
            "binary_name": "thunderbird",
            "binary_version": "1:91.9.1+build1-0ubuntu0.18.04.1"
          },
          {
            "binary_name": "thunderbird-gnome-support",
            "binary_version": "1:91.9.1+build1-0ubuntu0.18.04.1"
          },
          {
            "binary_name": "thunderbird-mozsymbols",
            "binary_version": "1:91.9.1+build1-0ubuntu0.18.04.1"
          },
          {
            "binary_name": "xul-ext-calendar-timezones",
            "binary_version": "1:91.9.1+build1-0ubuntu0.18.04.1"
          },
          {
            "binary_name": "xul-ext-gdata-provider",
            "binary_version": "1:91.9.1+build1-0ubuntu0.18.04.1"
          },
          {
            "binary_name": "xul-ext-lightning",
            "binary_version": "1:91.9.1+build1-0ubuntu0.18.04.1"
          }
        ]
      },
      "package": {
        "ecosystem": "Ubuntu:18.04:LTS",
        "name": "thunderbird",
        "purl": "pkg:deb/ubuntu/thunderbird@1:91.9.1+build1-0ubuntu0.18.04.1?arch=source\u0026distro=bionic"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "1:91.9.1+build1-0ubuntu0.18.04.1"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "1:52.4.0+build1-0ubuntu2",
        "1:52.6.0+build1-0ubuntu1",
        "1:52.7.0+build1-0ubuntu1",
        "1:52.8.0+build1-0ubuntu0.18.04.1",
        "1:52.9.1+build3-0ubuntu0.18.04.1",
        "1:60.2.1+build1-0ubuntu0.18.04.2",
        "1:60.4.0+build2-0ubuntu0.18.04.1",
        "1:60.5.1+build2-0ubuntu0.18.04.1",
        "1:60.6.1+build2-0ubuntu0.18.04.1",
        "1:60.7.0+build1-0ubuntu0.18.04.1",
        "1:60.7.1+build1-0ubuntu0.18.04.1",
        "1:60.7.2+build2-0ubuntu0.18.04.1",
        "1:60.8.0+build1-0ubuntu0.18.04.1",
        "1:60.9.0+build1-0ubuntu0.18.04.1",
        "1:68.2.1+build1-0ubuntu0.18.04.1",
        "1:68.2.2+build1-0ubuntu0.18.04.1",
        "1:68.4.1+build1-0ubuntu0.18.04.1",
        "1:68.7.0+build1-0ubuntu0.18.04.1",
        "1:68.8.0+build2-0ubuntu0.18.04.2",
        "1:68.10.0+build1-0ubuntu0.18.04.1",
        "1:78.8.1+build1-0ubuntu0.18.04.1",
        "1:78.11.0+build1-0ubuntu0.18.04.2",
        "1:78.13.0+build1-0ubuntu0.18.04.1",
        "1:78.14.0+build1-0ubuntu0.18.04.1",
        "1:78.14.0+build1-0ubuntu0.18.04.2",
        "1:91.5.0+build1-0ubuntu0.18.04.1",
        "1:91.7.0+build2-0ubuntu0.18.04.1",
        "1:91.8.1+build1-0ubuntu0.18.04.1"
      ]
    },
    {
      "ecosystem_specific": {
        "availability": "No subscription required",
        "binaries": [
          {
            "binary_name": "firefox",
            "binary_version": "100.0.2+build1-0ubuntu0.20.04.1"
          },
          {
            "binary_name": "firefox-geckodriver",
            "binary_version": "100.0.2+build1-0ubuntu0.20.04.1"
          },
          {
            "binary_name": "firefox-mozsymbols",
            "binary_version": "100.0.2+build1-0ubuntu0.20.04.1"
          }
        ]
      },
      "package": {
        "ecosystem": "Ubuntu:20.04:LTS",
        "name": "firefox",
        "purl": "pkg:deb/ubuntu/firefox@100.0.2+build1-0ubuntu0.20.04.1?arch=source\u0026distro=focal"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "100.0.2+build1-0ubuntu0.20.04.1"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "69.0.3+build1-0ubuntu1",
        "70.0+build2-0ubuntu1",
        "70.0+build2-0ubuntu2",
        "70.0.1+build1-0ubuntu2",
        "71.0+build2-0ubuntu2",
        "71.0+build5-0ubuntu1",
        "72.0.1+build1-0ubuntu1",
        "72.0.2+build1-0ubuntu1",
        "73.0+build1-0ubuntu1",
        "73.0+build2-0ubuntu1",
        "73.0+build3-0ubuntu1",
        "73.0.1+build1-0ubuntu1",
        "74.0+build1-0ubuntu1",
        "74.0+build2-0ubuntu1",
        "74.0+build2-0ubuntu2",
        "74.0+build3-0ubuntu1",
        "75.0+build3-0ubuntu1",
        "76.0+build2-0ubuntu0.20.04.1",
        "76.0.1+build1-0ubuntu0.20.04.1",
        "77.0.1+build1-0ubuntu0.20.04.1",
        "78.0.1+build1-0ubuntu0.20.04.1",
        "78.0.2+build2-0ubuntu0.20.04.1",
        "79.0+build1-0ubuntu0.20.04.1",
        "80.0+build2-0ubuntu0.20.04.1",
        "80.0.1+build1-0ubuntu0.20.04.1",
        "81.0+build2-0ubuntu0.20.04.1",
        "81.0.2+build1-0ubuntu0.20.04.1",
        "82.0+build2-0ubuntu0.20.04.1",
        "82.0.2+build1-0ubuntu0.20.04.1",
        "82.0.3+build1-0ubuntu0.20.04.1",
        "83.0+build2-0ubuntu0.20.04.1",
        "84.0+build3-0ubuntu0.20.04.1",
        "84.0.1+build1-0ubuntu0.20.04.1",
        "84.0.2+build1-0ubuntu0.20.04.1",
        "85.0+build1-0ubuntu0.20.04.1",
        "85.0.1+build1-0ubuntu0.20.04.1",
        "86.0+build3-0ubuntu0.20.04.1",
        "86.0.1+build1-0ubuntu0.20.04.1",
        "87.0+build3-0ubuntu0.20.04.2",
        "88.0+build2-0ubuntu0.20.04.1",
        "88.0.1+build1-0ubuntu0.20.04.2",
        "89.0+build2-0ubuntu0.20.04.2",
        "89.0.1+build1-0ubuntu0.20.04.1",
        "89.0.2+build1-0ubuntu0.20.04.1",
        "90.0+build1-0ubuntu0.20.04.1",
        "90.0.2+build1-0ubuntu0.20.04.1",
        "91.0+build2-0ubuntu0.20.04.1",
        "91.0.1+build1-0ubuntu0.20.04.1",
        "91.0.2+build1-0ubuntu0.20.04.1",
        "92.0+build3-0ubuntu0.20.04.1",
        "93.0+build1-0ubuntu0.20.04.1",
        "94.0+build3-0ubuntu0.20.04.1",
        "95.0+build1-0ubuntu0.20.04.1",
        "95.0.1+build2-0ubuntu0.20.04.1",
        "96.0+build2-0ubuntu0.20.04.1",
        "97.0+build2-0ubuntu0.20.04.1",
        "97.0.2+build1-0ubuntu0.20.04.1",
        "98.0+build3-0ubuntu0.20.04.2",
        "98.0.1+build2-0ubuntu0.20.04.1",
        "98.0.2+build1-0ubuntu0.20.04.1",
        "99.0+build2-0ubuntu0.20.04.2",
        "100.0+build2-0ubuntu0.20.04.1"
      ]
    },
    {
      "ecosystem_specific": {
        "availability": "No subscription required",
        "binaries": [
          {
            "binary_name": "thunderbird",
            "binary_version": "1:91.9.1+build1-0ubuntu0.20.04.1"
          },
          {
            "binary_name": "thunderbird-gnome-support",
            "binary_version": "1:91.9.1+build1-0ubuntu0.20.04.1"
          },
          {
            "binary_name": "thunderbird-mozsymbols",
            "binary_version": "1:91.9.1+build1-0ubuntu0.20.04.1"
          },
          {
            "binary_name": "xul-ext-calendar-timezones",
            "binary_version": "1:91.9.1+build1-0ubuntu0.20.04.1"
          },
          {
            "binary_name": "xul-ext-gdata-provider",
            "binary_version": "1:91.9.1+build1-0ubuntu0.20.04.1"
          },
          {
            "binary_name": "xul-ext-lightning",
            "binary_version": "1:91.9.1+build1-0ubuntu0.20.04.1"
          }
        ]
      },
      "package": {
        "ecosystem": "Ubuntu:20.04:LTS",
        "name": "thunderbird",
        "purl": "pkg:deb/ubuntu/thunderbird@1:91.9.1+build1-0ubuntu0.20.04.1?arch=source\u0026distro=focal"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "1:91.9.1+build1-0ubuntu0.20.04.1"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "1:68.1.2+build1-0ubuntu1",
        "1:68.1.2+build1-0ubuntu2",
        "1:68.2.1+build1-0ubuntu1",
        "1:68.2.2+build1-0ubuntu1",
        "1:68.3.0+build2-0ubuntu1",
        "1:68.3.1+build1-0ubuntu2",
        "1:68.4.1+build1-0ubuntu1",
        "1:68.4.2+build2-0ubuntu1",
        "1:68.5.0+build1-0ubuntu1",
        "1:68.6.0+build2-0ubuntu1",
        "1:68.7.0+build1-0ubuntu1",
        "1:68.7.0+build1-0ubuntu2",
        "1:68.8.0+build2-0ubuntu0.20.04.2",
        "1:68.10.0+build1-0ubuntu0.20.04.1",
        "1:78.7.1+build1-0ubuntu0.20.04.1",
        "1:78.8.1+build1-0ubuntu0.20.04.1",
        "1:78.11.0+build1-0ubuntu0.20.04.2",
        "1:78.13.0+build1-0ubuntu0.20.04.2",
        "1:78.14.0+build1-0ubuntu0.20.04.1",
        "1:78.14.0+build1-0ubuntu0.20.04.2",
        "1:91.5.0+build1-0ubuntu0.20.04.1",
        "1:91.7.0+build2-0ubuntu0.20.04.1",
        "1:91.8.1+build1-0ubuntu0.20.04.1"
      ]
    },
    {
      "ecosystem_specific": {
        "availability": "No subscription required",
        "binaries": [
          {
            "binary_name": "thunderbird",
            "binary_version": "1:91.9.1+build1-0ubuntu0.22.04.1"
          },
          {
            "binary_name": "thunderbird-gnome-support",
            "binary_version": "1:91.9.1+build1-0ubuntu0.22.04.1"
          },
          {
            "binary_name": "thunderbird-mozsymbols",
            "binary_version": "1:91.9.1+build1-0ubuntu0.22.04.1"
          },
          {
            "binary_name": "xul-ext-calendar-timezones",
            "binary_version": "1:91.9.1+build1-0ubuntu0.22.04.1"
          },
          {
            "binary_name": "xul-ext-gdata-provider",
            "binary_version": "1:91.9.1+build1-0ubuntu0.22.04.1"
          },
          {
            "binary_name": "xul-ext-lightning",
            "binary_version": "1:91.9.1+build1-0ubuntu0.22.04.1"
          }
        ]
      },
      "package": {
        "ecosystem": "Ubuntu:22.04:LTS",
        "name": "thunderbird",
        "purl": "pkg:deb/ubuntu/thunderbird@1:91.9.1+build1-0ubuntu0.22.04.1?arch=source\u0026distro=jammy"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "1:91.9.1+build1-0ubuntu0.22.04.1"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "1:91.1.2+build1-0ubuntu1",
        "1:91.3.0+build2-0ubuntu1",
        "1:91.3.1+build1-0ubuntu1",
        "1:91.3.2+build1-0ubuntu1",
        "1:91.4.0+build1.1-0ubuntu1",
        "1:91.4.0+build2-0ubuntu1",
        "1:91.5.0+build1-0ubuntu1",
        "1:91.5.1+build1-0ubuntu1",
        "1:91.6.1+build1-0ubuntu1",
        "1:91.7.0+build1-0ubuntu1",
        "1:91.7.0+build2-0ubuntu1",
        "1:91.8.0+build2-0ubuntu1"
      ]
    }
  ],
  "aliases": [],
  "details": "An attacker could have sent a message to the parent process where the contents were used to double-index into a JavaScript object, leading to prototype pollution and ultimately attacker-controlled JavaScript executing in the privileged parent process. This vulnerability affects Firefox ESR \u003c 91.9.1, Firefox \u003c 100.0.2, Firefox for Android \u003c 100.3.0, and Thunderbird \u003c 91.9.1.",
  "id": "UBUNTU-CVE-2022-1529",
  "modified": "2026-04-22T07:41:12Z",
  "published": "2022-05-23T00:00:00Z",
  "references": [
    {
      "type": "REPORT",
      "url": "https://ubuntu.com/security/CVE-2022-1529"
    },
    {
      "type": "REPORT",
      "url": "https://www.mozilla.org/en-US/security/advisories/mfsa2022-19/#CVE-2022-1529"
    },
    {
      "type": "ADVISORY",
      "url": "https://ubuntu.com/security/notices/USN-5434-1"
    },
    {
      "type": "ADVISORY",
      "url": "https://ubuntu.com/security/notices/USN-5435-1"
    },
    {
      "type": "REPORT",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-1529"
    }
  ],
  "related": [
    "USN-5434-1",
    "USN-5435-1"
  ],
  "schema_version": "1.7.0",
  "severity": [
    {
      "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
      "type": "CVSS_V3"
    },
    {
      "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
      "type": "CVSS_V3"
    },
    {
      "score": "medium",
      "type": "Ubuntu"
    }
  ],
  "upstream": [
    "CVE-2022-1529"
  ]
}

CVE-2022-1529 (GCVE-0-2022-1529)

Vulnerability from cvelistv5 – Published: 2022-12-22 00:00 – Updated: 2025-04-16 15:19

Summary

Severity

8.8 (High)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

SSVC

Exploitation: none Automatable: no Technical Impact: total

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2025-04-16 15:19 UTC

CWE

Untrusted input used in JavaScript object indexing, leading to prototype pollution
CWE-1321 - Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution')

Assigner

mozilla mitre root

References

2 references

URL	Tags
https://www.mozilla.org/security/advisories/mfsa2…
https://bugzilla.mozilla.org/show_bug.cgi?id=1770048

Impacted products

4 products

Vendor	Product	Version
Mozilla	Firefox ESR	Affected: unspecified , < 91.9.1 (custom)
Mozilla	Firefox	Affected: unspecified , < 100.0.2 (custom)
Mozilla	Firefox for Android	Affected: unspecified , < 100.3.0 (custom)
Mozilla	Thunderbird	Affected: unspecified , < 91.9.1 (custom)

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-03T00:10:03.467Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://www.mozilla.org/security/advisories/mfsa2022-19/"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1770048"
          }
        ],
        "title": "CVE Program Container"
      },
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "NETWORK",
              "availabilityImpact": "HIGH",
              "baseScore": 8.8,
              "baseSeverity": "HIGH",
              "confidentialityImpact": "HIGH",
              "integrityImpact": "HIGH",
              "privilegesRequired": "NONE",
              "scope": "UNCHANGED",
              "userInteraction": "REQUIRED",
              "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2022-1529",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-04-16T15:19:19.148657Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-1321",
                "description": "CWE-1321 Improperly Controlled Modification of Object Prototype Attributes (\u0027Prototype Pollution\u0027)",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-04-16T15:19:47.119Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "Firefox ESR",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThan": "91.9.1",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "Firefox",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThan": "100.0.2",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "Firefox for Android",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThan": "100.3.0",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "Thunderbird",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThan": "91.9.1",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "An attacker could have sent a message to the parent process where the contents were used to double-index into a JavaScript object, leading to prototype pollution and ultimately attacker-controlled JavaScript executing in the privileged parent process. This vulnerability affects Firefox ESR \u003c 91.9.1, Firefox \u003c 100.0.2, Firefox for Android \u003c 100.3.0, and Thunderbird \u003c 91.9.1."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "Untrusted input used in JavaScript object indexing, leading to prototype pollution",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2022-12-22T00:00:00.000Z",
        "orgId": "f16b083a-5664-49f3-a51e-8d479e5ed7fe",
        "shortName": "mozilla"
      },
      "references": [
        {
          "url": "https://www.mozilla.org/security/advisories/mfsa2022-19/"
        },
        {
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1770048"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "f16b083a-5664-49f3-a51e-8d479e5ed7fe",
    "assignerShortName": "mozilla",
    "cveId": "CVE-2022-1529",
    "datePublished": "2022-12-22T00:00:00.000Z",
    "dateReserved": "2022-04-29T00:00:00.000Z",
    "dateUpdated": "2025-04-16T15:19:47.119Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

USN-5434-1 (UBUNTU-CVE-2022-1529)

Vulnerability from osv_ubuntu – Published: 2022-05-23 13:49 – Updated: 2026-04-22 07:37 – Source website

Summary

firefox vulnerabilities

Details

It was discovered that the methods of an Array object could be corrupted as a result of prototype pollution by sending a message to the parent process. If a user were tricked into opening a specially crafted website, an attacker could exploit this to execute JavaScript in a privileged context.

References

URL

Type

	https://ubuntu.com/security/notices/USN-5434-1	ADVISORY
	https://ubuntu.com/security/CVE-2022-1529	REPORT
	https://ubuntu.com/security/CVE-2022-1802	REPORT

JSON

To clipboard

{
  "affected": [
    {
      "database_specific": {
        "cves_map": {
          "cves": [
            {
              "id": "CVE-2022-1529",
              "severity": [
                {
                  "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
                  "type": "CVSS_V3"
                },
                {
                  "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
                  "type": "CVSS_V3"
                },
                {
                  "score": "medium",
                  "type": "Ubuntu"
                }
              ]
            },
            {
              "id": "CVE-2022-1802",
              "severity": [
                {
                  "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
                  "type": "CVSS_V3"
                },
                {
                  "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
                  "type": "CVSS_V3"
                },
                {
                  "score": "medium",
                  "type": "Ubuntu"
                }
              ]
            }
          ],
          "ecosystem": "Ubuntu:18.04:LTS"
        }
      },
      "ecosystem_specific": {
        "availability": "No subscription required",
        "binaries": [
          {
            "binary_name": "firefox",
            "binary_version": "100.0.2+build1-0ubuntu0.18.04.1"
          },
          {
            "binary_name": "firefox-geckodriver",
            "binary_version": "100.0.2+build1-0ubuntu0.18.04.1"
          },
          {
            "binary_name": "firefox-mozsymbols",
            "binary_version": "100.0.2+build1-0ubuntu0.18.04.1"
          }
        ]
      },
      "package": {
        "ecosystem": "Ubuntu:18.04:LTS",
        "name": "firefox",
        "purl": "pkg:deb/ubuntu/firefox@100.0.2+build1-0ubuntu0.18.04.1?arch=source\u0026distro=bionic"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "100.0.2+build1-0ubuntu0.18.04.1"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "56.0+build6-0ubuntu1",
        "57.0.1+build2-0ubuntu1",
        "59.0.1+build1-0ubuntu1",
        "59.0.2+build1-0ubuntu1",
        "60.0+build2-0ubuntu1",
        "60.0.1+build2-0ubuntu0.18.04.1",
        "60.0.2+build1-0ubuntu0.18.04.1",
        "61.0+build3-0ubuntu0.18.04.1",
        "61.0.1+build1-0ubuntu0.18.04.1",
        "62.0+build2-0ubuntu0.18.04.3",
        "62.0+build2-0ubuntu0.18.04.4",
        "62.0+build2-0ubuntu0.18.04.5",
        "62.0.3+build1-0ubuntu0.18.04.1",
        "63.0+build2-0ubuntu0.18.04.2",
        "63.0.3+build1-0ubuntu0.18.04.1",
        "64.0+build3-0ubuntu0.18.04.1",
        "65.0+build2-0ubuntu0.18.04.1",
        "65.0.1+build2-0ubuntu0.18.04.1",
        "66.0+build3-0ubuntu0.18.04.1",
        "66.0.1+build1-0ubuntu0.18.04.1",
        "66.0.2+build1-0ubuntu0.18.04.1",
        "66.0.3+build1-0ubuntu0.18.04.1",
        "66.0.4+build3-0ubuntu0.18.04.1",
        "66.0.5+build1-0ubuntu0.18.04.1",
        "67.0+build2-0ubuntu0.18.04.1",
        "67.0.1+build1-0ubuntu0.18.04.1",
        "67.0.2+build2-0ubuntu0.18.04.1",
        "67.0.3+build1-0ubuntu0.18.04.1",
        "67.0.4+build1-0ubuntu0.18.04.1",
        "68.0+build3-0ubuntu0.18.04.1",
        "68.0.1+build1-0ubuntu0.18.04.1",
        "68.0.2+build1-0ubuntu0.18.04.1",
        "69.0+build2-0ubuntu0.18.04.1",
        "69.0.1+build1-0ubuntu0.18.04.1",
        "69.0.2+build1-0ubuntu0.18.04.1",
        "70.0+build2-0ubuntu0.18.04.1",
        "70.0.1+build1-0ubuntu0.18.04.1",
        "71.0+build5-0ubuntu0.18.04.1",
        "72.0.1+build1-0ubuntu0.18.04.1",
        "72.0.2+build1-0ubuntu0.18.04.1",
        "73.0+build3-0ubuntu0.18.04.1",
        "73.0.1+build1-0ubuntu0.18.04.1",
        "74.0+build3-0ubuntu0.18.04.1",
        "74.0.1+build1-0ubuntu0.18.04.1",
        "75.0+build3-0ubuntu0.18.04.1",
        "76.0+build2-0ubuntu0.18.04.1",
        "76.0.1+build1-0ubuntu0.18.04.1",
        "77.0.1+build1-0ubuntu0.18.04.1",
        "78.0.1+build1-0ubuntu0.18.04.1",
        "78.0.2+build2-0ubuntu0.18.04.1",
        "79.0+build1-0ubuntu0.18.04.1",
        "80.0+build2-0ubuntu0.18.04.1",
        "80.0.1+build1-0ubuntu0.18.04.1",
        "81.0+build2-0ubuntu0.18.04.1",
        "81.0.2+build1-0ubuntu0.18.04.1",
        "82.0+build2-0ubuntu0.18.04.1",
        "82.0.2+build1-0ubuntu0.18.04.1",
        "82.0.3+build1-0ubuntu0.18.04.1",
        "83.0+build2-0ubuntu0.18.04.2",
        "84.0+build3-0ubuntu0.18.04.1",
        "84.0.1+build1-0ubuntu0.18.04.1",
        "84.0.2+build1-0ubuntu0.18.04.1",
        "85.0+build1-0ubuntu0.18.04.1",
        "85.0.1+build1-0ubuntu0.18.04.1",
        "86.0+build3-0ubuntu0.18.04.1",
        "86.0.1+build1-0ubuntu0.18.04.1",
        "87.0+build3-0ubuntu0.18.04.2",
        "88.0+build2-0ubuntu0.18.04.2",
        "88.0.1+build1-0ubuntu0.18.04.2",
        "89.0+build2-0ubuntu0.18.04.2",
        "89.0.1+build1-0ubuntu0.18.04.1",
        "89.0.2+build1-0ubuntu0.18.04.1",
        "90.0+build1-0ubuntu0.18.04.1",
        "90.0.2+build1-0ubuntu0.18.04.1",
        "91.0+build2-0ubuntu0.18.04.1",
        "91.0.1+build1-0ubuntu0.18.04.1",
        "91.0.2+build1-0ubuntu0.18.04.1",
        "92.0+build3-0ubuntu0.18.04.1",
        "93.0+build1-0ubuntu0.18.04.1",
        "94.0+build3-0ubuntu0.18.04.1",
        "95.0+build1-0ubuntu0.18.04.1",
        "95.0.1+build2-0ubuntu0.18.04.1",
        "96.0+build2-0ubuntu0.18.04.1",
        "97.0+build2-0ubuntu0.18.04.1",
        "97.0.2+build1-0ubuntu0.18.04.1",
        "98.0+build3-0ubuntu0.18.04.2",
        "98.0.1+build2-0ubuntu0.18.04.1",
        "98.0.2+build1-0ubuntu0.18.04.1",
        "99.0+build2-0ubuntu0.18.04.2",
        "100.0+build2-0ubuntu0.18.04.1"
      ]
    },
    {
      "database_specific": {
        "cves_map": {
          "cves": [
            {
              "id": "CVE-2022-1529",
              "severity": [
                {
                  "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
                  "type": "CVSS_V3"
                },
                {
                  "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
                  "type": "CVSS_V3"
                },
                {
                  "score": "medium",
                  "type": "Ubuntu"
                }
              ]
            },
            {
              "id": "CVE-2022-1802",
              "severity": [
                {
                  "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
                  "type": "CVSS_V3"
                },
                {
                  "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
                  "type": "CVSS_V3"
                },
                {
                  "score": "medium",
                  "type": "Ubuntu"
                }
              ]
            }
          ],
          "ecosystem": "Ubuntu:20.04:LTS"
        }
      },
      "ecosystem_specific": {
        "availability": "No subscription required",
        "binaries": [
          {
            "binary_name": "firefox",
            "binary_version": "100.0.2+build1-0ubuntu0.20.04.1"
          },
          {
            "binary_name": "firefox-geckodriver",
            "binary_version": "100.0.2+build1-0ubuntu0.20.04.1"
          },
          {
            "binary_name": "firefox-mozsymbols",
            "binary_version": "100.0.2+build1-0ubuntu0.20.04.1"
          }
        ]
      },
      "package": {
        "ecosystem": "Ubuntu:20.04:LTS",
        "name": "firefox",
        "purl": "pkg:deb/ubuntu/firefox@100.0.2+build1-0ubuntu0.20.04.1?arch=source\u0026distro=focal"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "100.0.2+build1-0ubuntu0.20.04.1"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "69.0.3+build1-0ubuntu1",
        "70.0+build2-0ubuntu1",
        "70.0+build2-0ubuntu2",
        "70.0.1+build1-0ubuntu2",
        "71.0+build2-0ubuntu2",
        "71.0+build5-0ubuntu1",
        "72.0.1+build1-0ubuntu1",
        "72.0.2+build1-0ubuntu1",
        "73.0+build1-0ubuntu1",
        "73.0+build2-0ubuntu1",
        "73.0+build3-0ubuntu1",
        "73.0.1+build1-0ubuntu1",
        "74.0+build1-0ubuntu1",
        "74.0+build2-0ubuntu1",
        "74.0+build2-0ubuntu2",
        "74.0+build3-0ubuntu1",
        "75.0+build3-0ubuntu1",
        "76.0+build2-0ubuntu0.20.04.1",
        "76.0.1+build1-0ubuntu0.20.04.1",
        "77.0.1+build1-0ubuntu0.20.04.1",
        "78.0.1+build1-0ubuntu0.20.04.1",
        "78.0.2+build2-0ubuntu0.20.04.1",
        "79.0+build1-0ubuntu0.20.04.1",
        "80.0+build2-0ubuntu0.20.04.1",
        "80.0.1+build1-0ubuntu0.20.04.1",
        "81.0+build2-0ubuntu0.20.04.1",
        "81.0.2+build1-0ubuntu0.20.04.1",
        "82.0+build2-0ubuntu0.20.04.1",
        "82.0.2+build1-0ubuntu0.20.04.1",
        "82.0.3+build1-0ubuntu0.20.04.1",
        "83.0+build2-0ubuntu0.20.04.1",
        "84.0+build3-0ubuntu0.20.04.1",
        "84.0.1+build1-0ubuntu0.20.04.1",
        "84.0.2+build1-0ubuntu0.20.04.1",
        "85.0+build1-0ubuntu0.20.04.1",
        "85.0.1+build1-0ubuntu0.20.04.1",
        "86.0+build3-0ubuntu0.20.04.1",
        "86.0.1+build1-0ubuntu0.20.04.1",
        "87.0+build3-0ubuntu0.20.04.2",
        "88.0+build2-0ubuntu0.20.04.1",
        "88.0.1+build1-0ubuntu0.20.04.2",
        "89.0+build2-0ubuntu0.20.04.2",
        "89.0.1+build1-0ubuntu0.20.04.1",
        "89.0.2+build1-0ubuntu0.20.04.1",
        "90.0+build1-0ubuntu0.20.04.1",
        "90.0.2+build1-0ubuntu0.20.04.1",
        "91.0+build2-0ubuntu0.20.04.1",
        "91.0.1+build1-0ubuntu0.20.04.1",
        "91.0.2+build1-0ubuntu0.20.04.1",
        "92.0+build3-0ubuntu0.20.04.1",
        "93.0+build1-0ubuntu0.20.04.1",
        "94.0+build3-0ubuntu0.20.04.1",
        "95.0+build1-0ubuntu0.20.04.1",
        "95.0.1+build2-0ubuntu0.20.04.1",
        "96.0+build2-0ubuntu0.20.04.1",
        "97.0+build2-0ubuntu0.20.04.1",
        "97.0.2+build1-0ubuntu0.20.04.1",
        "98.0+build3-0ubuntu0.20.04.2",
        "98.0.1+build2-0ubuntu0.20.04.1",
        "98.0.2+build1-0ubuntu0.20.04.1",
        "99.0+build2-0ubuntu0.20.04.2",
        "100.0+build2-0ubuntu0.20.04.1"
      ]
    }
  ],
  "aliases": [],
  "details": "It was discovered that the methods of an Array object could be corrupted\nas a result of prototype pollution by sending a message to the parent\nprocess. If a user were tricked into opening a specially crafted website,\nan attacker could exploit this to execute JavaScript in a privileged\ncontext.\n",
  "id": "USN-5434-1",
  "modified": "2026-04-22T07:37:02Z",
  "published": "2022-05-23T13:49:37Z",
  "references": [
    {
      "type": "ADVISORY",
      "url": "https://ubuntu.com/security/notices/USN-5434-1"
    },
    {
      "type": "REPORT",
      "url": "https://ubuntu.com/security/CVE-2022-1529"
    },
    {
      "type": "REPORT",
      "url": "https://ubuntu.com/security/CVE-2022-1802"
    }
  ],
  "related": [],
  "schema_version": "1.7.0",
  "summary": "firefox vulnerabilities",
  "upstream": [
    "UBUNTU-CVE-2022-1529",
    "UBUNTU-CVE-2022-1802"
  ]
}

USN-5435-1 (UBUNTU-CVE-2022-1520)

Vulnerability from osv_ubuntu – Published: 2022-05-25 07:47 – Updated: 2026-04-22 07:37 – Source website

Summary

thunderbird vulnerabilities

Details

Multiple security issues were discovered in Thunderbird. If a user were tricked into opening a specially crafted website in a browsing context, an attacker could potentially exploit these to cause a denial of service, bypass permission prompts, obtain sensitive information, bypass security restrictions, cause user confusion, or execute arbitrary code. (CVE-2022-29909, CVE-2022-29911, CVE-2022-29912, CVE-2022-29913, CVE-2022-29914, CVE-2022-29916, CVE-2022-29917)

It was discovered that Thunderbird would show the wrong security status after viewing an attached message that is signed or encrypted. An attacker could potentially exploit this by tricking the user into trusting the authenticity of a message. (CVE-2022-1520)

It was discovered that the methods of an Array object could be corrupted as a result of prototype pollution by sending a message to the parent process. If a user were tricked into opening a specially crafted website in a browsing context, an attacker could exploit this to execute JavaScript in a privileged context. (CVE-2022-1529, CVE-2022-1802)

References

URL

Type

	https://ubuntu.com/security/notices/USN-5435-1	ADVISORY
	https://ubuntu.com/security/CVE-2022-1520	REPORT
	https://ubuntu.com/security/CVE-2022-1529	REPORT
	https://ubuntu.com/security/CVE-2022-1802	REPORT
	https://ubuntu.com/security/CVE-2022-29909	REPORT
	https://ubuntu.com/security/CVE-2022-29911	REPORT
	https://ubuntu.com/security/CVE-2022-29912	REPORT
	https://ubuntu.com/security/CVE-2022-29913	REPORT
	https://ubuntu.com/security/CVE-2022-29914	REPORT
	https://ubuntu.com/security/CVE-2022-29916	REPORT
	https://ubuntu.com/security/CVE-2022-29917	REPORT

JSON

To clipboard

{
  "affected": [
    {
      "database_specific": {
        "cves_map": {
          "cves": [
            {
              "id": "CVE-2022-1520",
              "severity": [
                {
                  "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
                  "type": "CVSS_V3"
                },
                {
                  "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
                  "type": "CVSS_V3"
                },
                {
                  "score": "low",
                  "type": "Ubuntu"
                }
              ]
            },
            {
              "id": "CVE-2022-1529",
              "severity": [
                {
                  "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
                  "type": "CVSS_V3"
                },
                {
                  "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
                  "type": "CVSS_V3"
                },
                {
                  "score": "medium",
                  "type": "Ubuntu"
                }
              ]
            },
            {
              "id": "CVE-2022-1802",
              "severity": [
                {
                  "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
                  "type": "CVSS_V3"
                },
                {
                  "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
                  "type": "CVSS_V3"
                },
                {
                  "score": "medium",
                  "type": "Ubuntu"
                }
              ]
            },
            {
              "id": "CVE-2022-29909",
              "severity": [
                {
                  "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
                  "type": "CVSS_V3"
                },
                {
                  "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
                  "type": "CVSS_V3"
                },
                {
                  "score": "medium",
                  "type": "Ubuntu"
                }
              ]
            },
            {
              "id": "CVE-2022-29911",
              "severity": [
                {
                  "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
                  "type": "CVSS_V3"
                },
                {
                  "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
                  "type": "CVSS_V3"
                },
                {
                  "score": "medium",
                  "type": "Ubuntu"
                }
              ]
            },
            {
              "id": "CVE-2022-29912",
              "severity": [
                {
                  "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
                  "type": "CVSS_V3"
                },
                {
                  "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
                  "type": "CVSS_V3"
                },
                {
                  "score": "medium",
                  "type": "Ubuntu"
                }
              ]
            },
            {
              "id": "CVE-2022-29913",
              "severity": [
                {
                  "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
                  "type": "CVSS_V3"
                },
                {
                  "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
                  "type": "CVSS_V3"
                },
                {
                  "score": "medium",
                  "type": "Ubuntu"
                }
              ]
            },
            {
              "id": "CVE-2022-29914",
              "severity": [
                {
                  "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
                  "type": "CVSS_V3"
                },
                {
                  "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
                  "type": "CVSS_V3"
                },
                {
                  "score": "medium",
                  "type": "Ubuntu"
                }
              ]
            },
            {
              "id": "CVE-2022-29916",
              "severity": [
                {
                  "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
                  "type": "CVSS_V3"
                },
                {
                  "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
                  "type": "CVSS_V3"
                },
                {
                  "score": "medium",
                  "type": "Ubuntu"
                }
              ]
            },
            {
              "id": "CVE-2022-29917",
              "severity": [
                {
                  "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
                  "type": "CVSS_V3"
                },
                {
                  "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
                  "type": "CVSS_V3"
                },
                {
                  "score": "medium",
                  "type": "Ubuntu"
                }
              ]
            }
          ],
          "ecosystem": "Ubuntu:18.04:LTS"
        }
      },
      "ecosystem_specific": {
        "availability": "No subscription required",
        "binaries": [
          {
            "binary_name": "thunderbird",
            "binary_version": "1:91.9.1+build1-0ubuntu0.18.04.1"
          },
          {
            "binary_name": "thunderbird-gnome-support",
            "binary_version": "1:91.9.1+build1-0ubuntu0.18.04.1"
          },
          {
            "binary_name": "thunderbird-mozsymbols",
            "binary_version": "1:91.9.1+build1-0ubuntu0.18.04.1"
          },
          {
            "binary_name": "xul-ext-calendar-timezones",
            "binary_version": "1:91.9.1+build1-0ubuntu0.18.04.1"
          },
          {
            "binary_name": "xul-ext-gdata-provider",
            "binary_version": "1:91.9.1+build1-0ubuntu0.18.04.1"
          },
          {
            "binary_name": "xul-ext-lightning",
            "binary_version": "1:91.9.1+build1-0ubuntu0.18.04.1"
          }
        ]
      },
      "package": {
        "ecosystem": "Ubuntu:18.04:LTS",
        "name": "thunderbird",
        "purl": "pkg:deb/ubuntu/thunderbird@1:91.9.1+build1-0ubuntu0.18.04.1?arch=source\u0026distro=bionic"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "1:91.9.1+build1-0ubuntu0.18.04.1"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "1:52.4.0+build1-0ubuntu2",
        "1:52.6.0+build1-0ubuntu1",
        "1:52.7.0+build1-0ubuntu1",
        "1:52.8.0+build1-0ubuntu0.18.04.1",
        "1:52.9.1+build3-0ubuntu0.18.04.1",
        "1:60.2.1+build1-0ubuntu0.18.04.2",
        "1:60.4.0+build2-0ubuntu0.18.04.1",
        "1:60.5.1+build2-0ubuntu0.18.04.1",
        "1:60.6.1+build2-0ubuntu0.18.04.1",
        "1:60.7.0+build1-0ubuntu0.18.04.1",
        "1:60.7.1+build1-0ubuntu0.18.04.1",
        "1:60.7.2+build2-0ubuntu0.18.04.1",
        "1:60.8.0+build1-0ubuntu0.18.04.1",
        "1:60.9.0+build1-0ubuntu0.18.04.1",
        "1:68.2.1+build1-0ubuntu0.18.04.1",
        "1:68.2.2+build1-0ubuntu0.18.04.1",
        "1:68.4.1+build1-0ubuntu0.18.04.1",
        "1:68.7.0+build1-0ubuntu0.18.04.1",
        "1:68.8.0+build2-0ubuntu0.18.04.2",
        "1:68.10.0+build1-0ubuntu0.18.04.1",
        "1:78.8.1+build1-0ubuntu0.18.04.1",
        "1:78.11.0+build1-0ubuntu0.18.04.2",
        "1:78.13.0+build1-0ubuntu0.18.04.1",
        "1:78.14.0+build1-0ubuntu0.18.04.1",
        "1:78.14.0+build1-0ubuntu0.18.04.2",
        "1:91.5.0+build1-0ubuntu0.18.04.1",
        "1:91.7.0+build2-0ubuntu0.18.04.1",
        "1:91.8.1+build1-0ubuntu0.18.04.1"
      ]
    },
    {
      "database_specific": {
        "cves_map": {
          "cves": [
            {
              "id": "CVE-2022-1520",
              "severity": [
                {
                  "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
                  "type": "CVSS_V3"
                },
                {
                  "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
                  "type": "CVSS_V3"
                },
                {
                  "score": "low",
                  "type": "Ubuntu"
                }
              ]
            },
            {
              "id": "CVE-2022-1529",
              "severity": [
                {
                  "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
                  "type": "CVSS_V3"
                },
                {
                  "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
                  "type": "CVSS_V3"
                },
                {
                  "score": "medium",
                  "type": "Ubuntu"
                }
              ]
            },
            {
              "id": "CVE-2022-1802",
              "severity": [
                {
                  "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
                  "type": "CVSS_V3"
                },
                {
                  "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
                  "type": "CVSS_V3"
                },
                {
                  "score": "medium",
                  "type": "Ubuntu"
                }
              ]
            },
            {
              "id": "CVE-2022-29909",
              "severity": [
                {
                  "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
                  "type": "CVSS_V3"
                },
                {
                  "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
                  "type": "CVSS_V3"
                },
                {
                  "score": "medium",
                  "type": "Ubuntu"
                }
              ]
            },
            {
              "id": "CVE-2022-29911",
              "severity": [
                {
                  "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
                  "type": "CVSS_V3"
                },
                {
                  "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
                  "type": "CVSS_V3"
                },
                {
                  "score": "medium",
                  "type": "Ubuntu"
                }
              ]
            },
            {
              "id": "CVE-2022-29912",
              "severity": [
                {
                  "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
                  "type": "CVSS_V3"
                },
                {
                  "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
                  "type": "CVSS_V3"
                },
                {
                  "score": "medium",
                  "type": "Ubuntu"
                }
              ]
            },
            {
              "id": "CVE-2022-29913",
              "severity": [
                {
                  "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
                  "type": "CVSS_V3"
                },
                {
                  "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
                  "type": "CVSS_V3"
                },
                {
                  "score": "medium",
                  "type": "Ubuntu"
                }
              ]
            },
            {
              "id": "CVE-2022-29914",
              "severity": [
                {
                  "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
                  "type": "CVSS_V3"
                },
                {
                  "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
                  "type": "CVSS_V3"
                },
                {
                  "score": "medium",
                  "type": "Ubuntu"
                }
              ]
            },
            {
              "id": "CVE-2022-29916",
              "severity": [
                {
                  "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
                  "type": "CVSS_V3"
                },
                {
                  "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
                  "type": "CVSS_V3"
                },
                {
                  "score": "medium",
                  "type": "Ubuntu"
                }
              ]
            },
            {
              "id": "CVE-2022-29917",
              "severity": [
                {
                  "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
                  "type": "CVSS_V3"
                },
                {
                  "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
                  "type": "CVSS_V3"
                },
                {
                  "score": "medium",
                  "type": "Ubuntu"
                }
              ]
            }
          ],
          "ecosystem": "Ubuntu:20.04:LTS"
        }
      },
      "ecosystem_specific": {
        "availability": "No subscription required",
        "binaries": [
          {
            "binary_name": "thunderbird",
            "binary_version": "1:91.9.1+build1-0ubuntu0.20.04.1"
          },
          {
            "binary_name": "thunderbird-gnome-support",
            "binary_version": "1:91.9.1+build1-0ubuntu0.20.04.1"
          },
          {
            "binary_name": "thunderbird-mozsymbols",
            "binary_version": "1:91.9.1+build1-0ubuntu0.20.04.1"
          },
          {
            "binary_name": "xul-ext-calendar-timezones",
            "binary_version": "1:91.9.1+build1-0ubuntu0.20.04.1"
          },
          {
            "binary_name": "xul-ext-gdata-provider",
            "binary_version": "1:91.9.1+build1-0ubuntu0.20.04.1"
          },
          {
            "binary_name": "xul-ext-lightning",
            "binary_version": "1:91.9.1+build1-0ubuntu0.20.04.1"
          }
        ]
      },
      "package": {
        "ecosystem": "Ubuntu:20.04:LTS",
        "name": "thunderbird",
        "purl": "pkg:deb/ubuntu/thunderbird@1:91.9.1+build1-0ubuntu0.20.04.1?arch=source\u0026distro=focal"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "1:91.9.1+build1-0ubuntu0.20.04.1"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "1:68.1.2+build1-0ubuntu1",
        "1:68.1.2+build1-0ubuntu2",
        "1:68.2.1+build1-0ubuntu1",
        "1:68.2.2+build1-0ubuntu1",
        "1:68.3.0+build2-0ubuntu1",
        "1:68.3.1+build1-0ubuntu2",
        "1:68.4.1+build1-0ubuntu1",
        "1:68.4.2+build2-0ubuntu1",
        "1:68.5.0+build1-0ubuntu1",
        "1:68.6.0+build2-0ubuntu1",
        "1:68.7.0+build1-0ubuntu1",
        "1:68.7.0+build1-0ubuntu2",
        "1:68.8.0+build2-0ubuntu0.20.04.2",
        "1:68.10.0+build1-0ubuntu0.20.04.1",
        "1:78.7.1+build1-0ubuntu0.20.04.1",
        "1:78.8.1+build1-0ubuntu0.20.04.1",
        "1:78.11.0+build1-0ubuntu0.20.04.2",
        "1:78.13.0+build1-0ubuntu0.20.04.2",
        "1:78.14.0+build1-0ubuntu0.20.04.1",
        "1:78.14.0+build1-0ubuntu0.20.04.2",
        "1:91.5.0+build1-0ubuntu0.20.04.1",
        "1:91.7.0+build2-0ubuntu0.20.04.1",
        "1:91.8.1+build1-0ubuntu0.20.04.1"
      ]
    },
    {
      "database_specific": {
        "cves_map": {
          "cves": [
            {
              "id": "CVE-2022-1520",
              "severity": [
                {
                  "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
                  "type": "CVSS_V3"
                },
                {
                  "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
                  "type": "CVSS_V3"
                },
                {
                  "score": "low",
                  "type": "Ubuntu"
                }
              ]
            },
            {
              "id": "CVE-2022-1529",
              "severity": [
                {
                  "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
                  "type": "CVSS_V3"
                },
                {
                  "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
                  "type": "CVSS_V3"
                },
                {
                  "score": "medium",
                  "type": "Ubuntu"
                }
              ]
            },
            {
              "id": "CVE-2022-1802",
              "severity": [
                {
                  "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
                  "type": "CVSS_V3"
                },
                {
                  "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
                  "type": "CVSS_V3"
                },
                {
                  "score": "medium",
                  "type": "Ubuntu"
                }
              ]
            },
            {
              "id": "CVE-2022-29909",
              "severity": [
                {
                  "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
                  "type": "CVSS_V3"
                },
                {
                  "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
                  "type": "CVSS_V3"
                },
                {
                  "score": "medium",
                  "type": "Ubuntu"
                }
              ]
            },
            {
              "id": "CVE-2022-29911",
              "severity": [
                {
                  "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
                  "type": "CVSS_V3"
                },
                {
                  "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
                  "type": "CVSS_V3"
                },
                {
                  "score": "medium",
                  "type": "Ubuntu"
                }
              ]
            },
            {
              "id": "CVE-2022-29912",
              "severity": [
                {
                  "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
                  "type": "CVSS_V3"
                },
                {
                  "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
                  "type": "CVSS_V3"
                },
                {
                  "score": "medium",
                  "type": "Ubuntu"
                }
              ]
            },
            {
              "id": "CVE-2022-29913",
              "severity": [
                {
                  "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
                  "type": "CVSS_V3"
                },
                {
                  "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
                  "type": "CVSS_V3"
                },
                {
                  "score": "medium",
                  "type": "Ubuntu"
                }
              ]
            },
            {
              "id": "CVE-2022-29914",
              "severity": [
                {
                  "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
                  "type": "CVSS_V3"
                },
                {
                  "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
                  "type": "CVSS_V3"
                },
                {
                  "score": "medium",
                  "type": "Ubuntu"
                }
              ]
            },
            {
              "id": "CVE-2022-29916",
              "severity": [
                {
                  "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
                  "type": "CVSS_V3"
                },
                {
                  "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
                  "type": "CVSS_V3"
                },
                {
                  "score": "medium",
                  "type": "Ubuntu"
                }
              ]
            },
            {
              "id": "CVE-2022-29917",
              "severity": [
                {
                  "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
                  "type": "CVSS_V3"
                },
                {
                  "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
                  "type": "CVSS_V3"
                },
                {
                  "score": "medium",
                  "type": "Ubuntu"
                }
              ]
            }
          ],
          "ecosystem": "Ubuntu:22.04:LTS"
        }
      },
      "ecosystem_specific": {
        "availability": "No subscription required",
        "binaries": [
          {
            "binary_name": "thunderbird",
            "binary_version": "1:91.9.1+build1-0ubuntu0.22.04.1"
          },
          {
            "binary_name": "thunderbird-gnome-support",
            "binary_version": "1:91.9.1+build1-0ubuntu0.22.04.1"
          },
          {
            "binary_name": "thunderbird-mozsymbols",
            "binary_version": "1:91.9.1+build1-0ubuntu0.22.04.1"
          },
          {
            "binary_name": "xul-ext-calendar-timezones",
            "binary_version": "1:91.9.1+build1-0ubuntu0.22.04.1"
          },
          {
            "binary_name": "xul-ext-gdata-provider",
            "binary_version": "1:91.9.1+build1-0ubuntu0.22.04.1"
          },
          {
            "binary_name": "xul-ext-lightning",
            "binary_version": "1:91.9.1+build1-0ubuntu0.22.04.1"
          }
        ]
      },
      "package": {
        "ecosystem": "Ubuntu:22.04:LTS",
        "name": "thunderbird",
        "purl": "pkg:deb/ubuntu/thunderbird@1:91.9.1+build1-0ubuntu0.22.04.1?arch=source\u0026distro=jammy"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "1:91.9.1+build1-0ubuntu0.22.04.1"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "1:91.1.2+build1-0ubuntu1",
        "1:91.3.0+build2-0ubuntu1",
        "1:91.3.1+build1-0ubuntu1",
        "1:91.3.2+build1-0ubuntu1",
        "1:91.4.0+build1.1-0ubuntu1",
        "1:91.4.0+build2-0ubuntu1",
        "1:91.5.0+build1-0ubuntu1",
        "1:91.5.1+build1-0ubuntu1",
        "1:91.6.1+build1-0ubuntu1",
        "1:91.7.0+build1-0ubuntu1",
        "1:91.7.0+build2-0ubuntu1",
        "1:91.8.0+build2-0ubuntu1"
      ]
    }
  ],
  "aliases": [],
  "details": "Multiple security issues were discovered in Thunderbird. If a user were\ntricked into opening a specially crafted website in a browsing context, an\nattacker could potentially exploit these to cause a denial of service,\nbypass permission prompts, obtain sensitive information, bypass security\nrestrictions, cause user confusion, or execute arbitrary code.\n(CVE-2022-29909, CVE-2022-29911, CVE-2022-29912, CVE-2022-29913,\nCVE-2022-29914, CVE-2022-29916, CVE-2022-29917)\n\nIt was discovered that Thunderbird would show the wrong security status\nafter viewing an attached message that is signed or encrypted. An attacker\ncould potentially exploit this by tricking the user into trusting the\nauthenticity of a message. (CVE-2022-1520)\n\nIt was discovered that the methods of an Array object could be corrupted\nas a result of prototype pollution by sending a message to the parent\nprocess. If a user were tricked into opening a specially crafted website\nin a browsing context, an attacker could exploit this to execute\nJavaScript in a privileged context. (CVE-2022-1529, CVE-2022-1802)\n",
  "id": "USN-5435-1",
  "modified": "2026-04-22T07:37:02Z",
  "published": "2022-05-25T07:47:27Z",
  "references": [
    {
      "type": "ADVISORY",
      "url": "https://ubuntu.com/security/notices/USN-5435-1"
    },
    {
      "type": "REPORT",
      "url": "https://ubuntu.com/security/CVE-2022-1520"
    },
    {
      "type": "REPORT",
      "url": "https://ubuntu.com/security/CVE-2022-1529"
    },
    {
      "type": "REPORT",
      "url": "https://ubuntu.com/security/CVE-2022-1802"
    },
    {
      "type": "REPORT",
      "url": "https://ubuntu.com/security/CVE-2022-29909"
    },
    {
      "type": "REPORT",
      "url": "https://ubuntu.com/security/CVE-2022-29911"
    },
    {
      "type": "REPORT",
      "url": "https://ubuntu.com/security/CVE-2022-29912"
    },
    {
      "type": "REPORT",
      "url": "https://ubuntu.com/security/CVE-2022-29913"
    },
    {
      "type": "REPORT",
      "url": "https://ubuntu.com/security/CVE-2022-29914"
    },
    {
      "type": "REPORT",
      "url": "https://ubuntu.com/security/CVE-2022-29916"
    },
    {
      "type": "REPORT",
      "url": "https://ubuntu.com/security/CVE-2022-29917"
    }
  ],
  "related": [],
  "schema_version": "1.7.0",
  "summary": "thunderbird vulnerabilities",
  "upstream": [
    "UBUNTU-CVE-2022-1520",
    "UBUNTU-CVE-2022-1529",
    "UBUNTU-CVE-2022-1802",
    "UBUNTU-CVE-2022-29909",
    "UBUNTU-CVE-2022-29911",
    "UBUNTU-CVE-2022-29912",
    "UBUNTU-CVE-2022-29913",
    "UBUNTU-CVE-2022-29914",
    "UBUNTU-CVE-2022-29916",
    "UBUNTU-CVE-2022-29917"
  ]
}

Sightings

Author	Source	Type	Date	Other

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

Detection rules are retrieved from Rulezet.

The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base model, served locally by ML-Gateway. They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.

Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.

Action not permitted

UBUNTU-CVE-2022-1529 (CVE-2022-1529)

CVE-2022-1529 (GCVE-0-2022-1529)

USN-5434-1 (UBUNTU-CVE-2022-1529)

USN-5435-1 (UBUNTU-CVE-2022-1520)

Tags

Sightings

Nomenclature

Related by attack behaviour