Navigations between XML documents may have led to a use-after-free and potentially exploitable crash.ĬVE-2022-34468: CSP sandbox header without 'allow-scripts' can be bypassed via retargeted javascript: URI. If after freeing a memory location, a program does not clear the pointer to that memory, an attacker can use the error to manipulate the program. Use after free (UAF) is a vulnerability caused by incorrect use of dynamic memory during a program's operation. It does not apply to other operating systems.ĬVE-2022-34470: Use-after-free in nsSHistory. These are the CVEs we think you should know: HighĬVE-2022-34479: A malicious website that could create a popup could have resized the popup to overlay the address bar with its own content, resulting in potential user confusion or spoofing attacks.

Its goal is to make it easier to share data across separate vulnerability capabilities (tools, databases, and services). Publicly disclosed computer security flaws are listed in the Common Vulnerabilities and Exposures (CVE) database.

The new version also comes with a new privacy feature that strips parameters from URLs that track you around the web. The new version fixes 20 security vulnerabilities, five of which are classified as “High”. Mozilla released version 102.0 of the Firefox browser to Release channel users on June 28, 2022.

Mozilla firefox for android virus