Unrated severityNVD Advisory· Published Dec 22, 2022· Updated Apr 15, 2025

CVE-2022-2200

Description

If an object prototype was corrupted by an attacker, they would have been able to set undesired attributes on a JavaScript object, leading to privileged code execution. This vulnerability affects Firefox < 102, Firefox ESR < 91.11, Thunderbird < 102, and Thunderbird < 91.11.

Affected products

osv-coords78 versions
pkg:rpm/almalinux/thunderbird pkg:rpm/opensuse/firefox-esr&distro=openSUSE%20Tumbleweed pkg:rpm/opensuse/MozillaFirefox-branding-SLE&distro=openSUSE%20Leap%2015.3 pkg:rpm/opensuse/MozillaFirefox-branding-SLE&distro=openSUSE%20Leap%2015.4 pkg:rpm/opensuse/MozillaFirefox&distro=openSUSE%20Leap%2015.3 pkg:rpm/opensuse/MozillaFirefox&distro=openSUSE%20Leap%2015.4 pkg:rpm/opensuse/MozillaFirefox&distro=openSUSE%20Tumbleweed pkg:rpm/opensuse/MozillaThunderbird&distro=openSUSE%20Leap%2015.3 pkg:rpm/opensuse/MozillaThunderbird&distro=openSUSE%20Leap%2015.4 pkg:rpm/opensuse/MozillaThunderbird&distro=openSUSE%20Tumbleweed pkg:rpm/suse/MozillaFirefox-branding-SLE&distro=SUSE%20Enterprise%20Storage%206 pkg:rpm/suse/MozillaFirefox-branding-SLE&distro=SUSE%20Enterprise%20Storage%207 pkg:rpm/suse/MozillaFirefox-branding-SLE&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP1-ESPOS pkg:rpm/suse/MozillaFirefox-branding-SLE&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP1-LTSS pkg:rpm/suse/MozillaFirefox-branding-SLE&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP2-ESPOS pkg:rpm/suse/MozillaFirefox-branding-SLE&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP2-LTSS pkg:rpm/suse/MozillaFirefox-branding-SLE&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015-ESPOS pkg:rpm/suse/MozillaFirefox-branding-SLE&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015-LTSS pkg:rpm/suse/MozillaFirefox-branding-SLE&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Desktop%20Applications%2015%20SP3 pkg:rpm/suse/MozillaFirefox-branding-SLE&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Desktop%20Applications%2015%20SP4 pkg:rpm/suse/MozillaFirefox-branding-SLE&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP2-BCL pkg:rpm/suse/MozillaFirefox-branding-SLE&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP3-BCL pkg:rpm/suse/MozillaFirefox-branding-SLE&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP4-LTSS pkg:rpm/suse/MozillaFirefox-branding-SLE&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP5 pkg:rpm/suse/MozillaFirefox-branding-SLE&distro=SUSE%20Linux%20Enterprise%20Server%2015%20SP1-BCL pkg:rpm/suse/MozillaFirefox-branding-SLE&distro=SUSE%20Linux%20Enterprise%20Server%2015%20SP1-LTSS pkg:rpm/suse/MozillaFirefox-branding-SLE&distro=SUSE%20Linux%20Enterprise%20Server%2015%20SP2-BCL pkg:rpm/suse/MozillaFirefox-branding-SLE&distro=SUSE%20Linux%20Enterprise%20Server%2015%20SP2-LTSS pkg:rpm/suse/MozillaFirefox-branding-SLE&distro=SUSE%20Linux%20Enterprise%20Server%2015-LTSS pkg:rpm/suse/MozillaFirefox-branding-SLE&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2012%20SP4 pkg:rpm/suse/MozillaFirefox-branding-SLE&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2012%20SP5 pkg:rpm/suse/MozillaFirefox-branding-SLE&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2015 pkg:rpm/suse/MozillaFirefox-branding-SLE&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2015%20SP1 pkg:rpm/suse/MozillaFirefox-branding-SLE&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2015%20SP2 pkg:rpm/suse/MozillaFirefox-branding-SLE&distro=SUSE%20Manager%20Proxy%204.1 pkg:rpm/suse/MozillaFirefox-branding-SLE&distro=SUSE%20Manager%20Retail%20Branch%20Server%204.1 pkg:rpm/suse/MozillaFirefox-branding-SLE&distro=SUSE%20Manager%20Server%204.1 pkg:rpm/suse/MozillaFirefox-branding-SLE&distro=SUSE%20OpenStack%20Cloud%209 pkg:rpm/suse/MozillaFirefox-branding-SLE&distro=SUSE%20OpenStack%20Cloud%20Crowbar%209 pkg:rpm/suse/MozillaFirefox&distro=HPE%20Helion%20OpenStack%208 pkg:rpm/suse/MozillaFirefox&distro=SUSE%20Enterprise%20Storage%206 pkg:rpm/suse/MozillaFirefox&distro=SUSE%20Enterprise%20Storage%207 pkg:rpm/suse/MozillaFirefox&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP1-ESPOS pkg:rpm/suse/MozillaFirefox&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP1-LTSS pkg:rpm/suse/MozillaFirefox&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP2-ESPOS pkg:rpm/suse/MozillaFirefox&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP2-LTSS pkg:rpm/suse/MozillaFirefox&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015-ESPOS pkg:rpm/suse/MozillaFirefox&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015-LTSS pkg:rpm/suse/MozillaFirefox&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Desktop%20Applications%2015%20SP3 pkg:rpm/suse/MozillaFirefox&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Desktop%20Applications%2015%20SP4 pkg:rpm/suse/MozillaFirefox&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP2-BCL pkg:rpm/suse/MozillaFirefox&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP3-BCL pkg:rpm/suse/MozillaFirefox&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP3-LTSS pkg:rpm/suse/MozillaFirefox&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP4-LTSS pkg:rpm/suse/MozillaFirefox&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP5 pkg:rpm/suse/MozillaFirefox&distro=SUSE%20Linux%20Enterprise%20Server%2015%20SP1-BCL pkg:rpm/suse/MozillaFirefox&distro=SUSE%20Linux%20Enterprise%20Server%2015%20SP1-LTSS pkg:rpm/suse/MozillaFirefox&distro=SUSE%20Linux%20Enterprise%20Server%2015%20SP2-BCL pkg:rpm/suse/MozillaFirefox&distro=SUSE%20Linux%20Enterprise%20Server%2015%20SP2-LTSS pkg:rpm/suse/MozillaFirefox&distro=SUSE%20Linux%20Enterprise%20Server%2015-LTSS pkg:rpm/suse/MozillaFirefox&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2012%20SP3 pkg:rpm/suse/MozillaFirefox&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2012%20SP4 pkg:rpm/suse/MozillaFirefox&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2012%20SP5 pkg:rpm/suse/MozillaFirefox&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2015 pkg:rpm/suse/MozillaFirefox&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2015%20SP1 pkg:rpm/suse/MozillaFirefox&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2015%20SP2 pkg:rpm/suse/MozillaFirefox&distro=SUSE%20Linux%20Enterprise%20Software%20Development%20Kit%2012%20SP5 pkg:rpm/suse/MozillaFirefox&distro=SUSE%20Manager%20Proxy%204.1 pkg:rpm/suse/MozillaFirefox&distro=SUSE%20Manager%20Retail%20Branch%20Server%204.1 pkg:rpm/suse/MozillaFirefox&distro=SUSE%20Manager%20Server%204.1 pkg:rpm/suse/MozillaFirefox&distro=SUSE%20OpenStack%20Cloud%208 pkg:rpm/suse/MozillaFirefox&distro=SUSE%20OpenStack%20Cloud%209 pkg:rpm/suse/MozillaFirefox&distro=SUSE%20OpenStack%20Cloud%20Crowbar%208 pkg:rpm/suse/MozillaFirefox&distro=SUSE%20OpenStack%20Cloud%20Crowbar%209 pkg:rpm/suse/MozillaThunderbird&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Package%20Hub%2015%20SP3 pkg:rpm/suse/MozillaThunderbird&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Package%20Hub%2015%20SP4 pkg:rpm/suse/MozillaThunderbird&distro=SUSE%20Linux%20Enterprise%20Workstation%20Extension%2015%20SP3 pkg:rpm/suse/MozillaThunderbird&distro=SUSE%20Linux%20Enterprise%20Workstation%20Extension%2015%20SP4
< 91.11.0-2.el9_0.alma+ 77 more
- (no CPE)range: < 91.11.0-2.el9_0.alma
- (no CPE)range: < 128.5.1-1.1
- (no CPE)range: < 102-150200.9.10.1
- (no CPE)range: < 102-150200.9.10.1
- (no CPE)range: < 91.11.0-150200.152.48.1
- (no CPE)range: < 91.11.0-150200.152.48.1
- (no CPE)range: < 102.0.1-1.1
- (no CPE)range: < 91.11.0-150200.8.76.1
- (no CPE)range: < 91.11.0-150200.8.76.1
- (no CPE)range: < 91.11.0-1.1
- (no CPE)range: < 102-150000.4.22.1
- (no CPE)range: < 102-150200.9.10.1
- (no CPE)range: < 102-150000.4.22.1
- (no CPE)range: < 102-150000.4.22.1
- (no CPE)range: < 102-150200.9.10.1
- (no CPE)range: < 102-150200.9.10.1
- (no CPE)range: < 102-150000.4.22.1
- (no CPE)range: < 102-150000.4.22.1
- (no CPE)range: < 102-150200.9.10.1
- (no CPE)range: < 102-150200.9.10.1
- (no CPE)range: < 102-35.9.1
- (no CPE)range: < 102-35.9.1
- (no CPE)range: < 102-35.9.1
- (no CPE)range: < 102-35.9.1
- (no CPE)range: < 102-150000.4.22.1
- (no CPE)range: < 102-150000.4.22.1
- (no CPE)range: < 102-150200.9.10.1
- (no CPE)range: < 102-150200.9.10.1
- (no CPE)range: < 102-150000.4.22.1
- (no CPE)range: < 102-35.9.1
- (no CPE)range: < 102-35.9.1
- (no CPE)range: < 102-150000.4.22.1
- (no CPE)range: < 102-150000.4.22.1
- (no CPE)range: < 102-150200.9.10.1
- (no CPE)range: < 102-150200.9.10.1
- (no CPE)range: < 102-150200.9.10.1
- (no CPE)range: < 102-150200.9.10.1
- (no CPE)range: < 102-35.9.1
- (no CPE)range: < 102-35.9.1
- (no CPE)range: < 91.11.0-112.119.1
- (no CPE)range: < 91.11.0-150000.150.47.1
- (no CPE)range: < 91.11.0-150200.152.48.1
- (no CPE)range: < 91.11.0-150000.150.47.1
- (no CPE)range: < 91.11.0-150000.150.47.1
- (no CPE)range: < 91.11.0-150200.152.48.1
- (no CPE)range: < 91.11.0-150200.152.48.1
- (no CPE)range: < 91.11.0-150000.150.47.1
- (no CPE)range: < 91.11.0-150000.150.47.1
- (no CPE)range: < 91.11.0-150200.152.48.1
- (no CPE)range: < 91.11.0-150200.152.48.1
- (no CPE)range: < 91.11.0-112.119.1
- (no CPE)range: < 91.11.0-112.119.1
- (no CPE)range: < 91.11.0-112.119.1
- (no CPE)range: < 91.11.0-112.119.1
- (no CPE)range: < 91.11.0-112.119.1
- (no CPE)range: < 91.11.0-150000.150.47.1
- (no CPE)range: < 91.11.0-150000.150.47.1
- (no CPE)range: < 91.11.0-150200.152.48.1
- (no CPE)range: < 91.11.0-150200.152.48.1
- (no CPE)range: < 91.11.0-150000.150.47.1
- (no CPE)range: < 91.11.0-112.119.1
- (no CPE)range: < 91.11.0-112.119.1
- (no CPE)range: < 91.11.0-112.119.1
- (no CPE)range: < 91.11.0-150000.150.47.1
- (no CPE)range: < 91.11.0-150000.150.47.1
- (no CPE)range: < 91.11.0-150200.152.48.1
- (no CPE)range: < 91.11.0-112.119.1
- (no CPE)range: < 91.11.0-150200.152.48.1
- (no CPE)range: < 91.11.0-150200.152.48.1
- (no CPE)range: < 91.11.0-150200.152.48.1
- (no CPE)range: < 91.11.0-112.119.1
- (no CPE)range: < 91.11.0-112.119.1
- (no CPE)range: < 91.11.0-112.119.1
- (no CPE)range: < 91.11.0-112.119.1
- (no CPE)range: < 91.11.0-150200.8.76.1
- (no CPE)range: < 91.11.0-150200.8.76.1
- (no CPE)range: < 91.11.0-150200.8.76.1
- (no CPE)range: < 91.11.0-150200.8.76.1
Mozilla Corporation/Firefoxv5
Range: unspecified
Mozilla Corporation/Thunderbirdv5
Range: unspecified
Mozilla Corporation/Firefox Esrcpe-rescue
Range: unspecified

Patches

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.005
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000