CVE-2022-46871highCWE-1104

CVE-2022-46871: high-severity vulnerability in Mozilla Firefox

Published · Updated

Follow this CVE+ Monitor Firefox+ Monitor firefox-esr

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

21Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 8.8epss 1.0%
In short

Firefox used an outdated library (libusrsctp) that contained security flaws which could be exploited by attackers. This could allow an attacker to compromise your browser or system.

Technical detail

Firefox versions prior to 108 included a vulnerable version of libusrsctp library with exploitable vulnerabilities (CWE-1104). Attack vector likely involves remote content interaction; successful exploitation could lead to code execution or information disclosure depending on the underlying libusrsctp vulnerability.

Summary generated and translated by AI from the official description.
An out of date library (libusrsctp) contained vulnerabilities that could potentially be exploited. This vulnerability affects Firefox < 108.
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Affected products
Mozilla · Firefox
Related CVEs — Mozilla Firefox

In the same product, most dangerous first.

CVE-2016-9079HIGHCVE-2016-9079EPSS 87.4%KEVCVE-2019-11708CRITICALCVE-2019-11708EPSS 55.9%KEVCVE-2019-17026HIGHCVE-2019-17026EPSS 46.3%KEVCVE-2019-11707HIGHCVE-2019-11707EPSS 38.0%KEVCVE-2024-9680CRITICALCVE-2024-9680EPSS 23.2%KEVCVE-2022-26485HIGHCVE-2022-26485EPSS 14.3%KEV