VDB

DEBIAN-CVE-2022-29914

DEBIAN-CVE-2022-29914 PUBLISHED CVSS 6.5 MEDIUM

When reusing existing popups Firefox would have allowed them to cover the fullscreen notification UI, which could have enabled browser spoofing attacks. This vulnerability affects Thunderbird < 91.9, Firefox ESR < 91.9, and Firefox < 100.

Risk Scores

CVSS 3.1
6.5
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N

Affected Products

VendorProductVersions
Debian:14thunderbird0
Debian:12firefox-esr0
Debian:12thunderbird0
Debian:13thunderbird0
Debian:13firefox-esr0
Debian:14firefox-esr0

Timeline

  • Dec 22, 2022 CVE Published
  • Oct 15, 2026 CVE Updated
Open in Interactive Console →
$ Console Community · 50/day Open console ›