Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2022-46872

An attacker who compromised a content process could have partially escaped the sandbox to read arbitrary files via clipboard-related IPC messages.<br>*This bug only affects Thunderbird for Linux. Other operating systems are unaffected.*. This vulnerability affects Firefox < 108, Firefox ESR < 102.6, and Thunderbird < 102.6.

Published

2022-12-22T20:15:45.817

Last Modified

2025-04-15T14:15:37.270

Status

Modified

Source

[email protected]

Severity

CVSSv3.1: 8.6 (HIGH)

Weaknesses
  • Type: Primary
    NVD-CWE-noinfo
  • Type: Secondary
    CWE-125
Affected Vendors & Products
Type Vendor Product Version/Range Vulnerable?
Application mozilla firefox < 108.0 Yes
Application mozilla firefox_esr < 102.6 Yes
Application mozilla thunderbird < 102.6 Yes
Operating System linux linux_kernel - No
References