CVE Database
/

CVE-2022-22753

Back to search

CVE-2022-22753

Published: Dec 22, 2022

Modified: Apr 16, 2025

PUBLISHED

Description

A Time-of-Check Time-of-Use bug existed in the Maintenance (Updater) Service that could be abused to grant Users write access to an arbitrary directory. This could have been used to escalate to SYSTEM access.<br>*This bug only affects Firefox on Windows. Other operating systems are unaffected.*. This vulnerability affects Firefox < 97, Thunderbird < 91.6, and Firefox ESR < 91.6.

VendorProductVersions

Mozilla

Firefox

affected
unspecified - < 97

Mozilla

Thunderbird

affected
unspecified - < 91.6

Mozilla

Firefox ESR

affected
unspecified - < 91.6

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now