VDB
DEBIAN-CVE-2022-29914
DEBIAN-CVE-2022-29914
PUBLISHED
CVSS 6.5 MEDIUM
When reusing existing popups Firefox would have allowed them to cover the fullscreen notification UI, which could have enabled browser spoofing attacks. This vulnerability affects Thunderbird < 91.9, Firefox ESR < 91.9, and Firefox < 100.
Risk Scores
CVSS v3.1
6.5
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Debian:11 | thunderbird | 1:91.3.0-1, 91.5.0-1, 91.5.0-1 |
| Debian:14 | thunderbird | 0, 0, 0 |
| Debian:11 | firefox-esr | 91.5.0esr-1, 91.5.0esr-1~deb10u1, 91.5.0esr-1~deb9u1 |
| Debian:12 | firefox-esr | 0, 0, 0 |
| Debian:12 | thunderbird | 0, 0, 0 |
| Debian:13 | thunderbird | 0, 0, 0 |
| Debian:13 | firefox-esr | 0, 0, 0 |
| Debian:14 | firefox-esr | 0, 0, 0 |
Timeline
- Dec 22, 2022 CVE Published
- Apr 28, 2026 CVE Updated