VDB
DEBIAN-CVE-2022-29916
DEBIAN-CVE-2022-29916
PUBLISHED
CVSS 6.5 MEDIUM
Firefox behaved slightly differently for already known resources when loading CSS resources involving CSS variables. This could have been used to probe the browser history. This vulnerability affects Thunderbird < 91.9, Firefox ESR < 91.9, and Firefox < 100.
Risk Scores
CVSS 3.1
6.5
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Debian:13 | firefox-esr | 0 |
| Debian:14 | thunderbird | 0 |
| Debian:12 | firefox-esr | 0 |
| Debian:12 | thunderbird | 0 |
| Debian:13 | thunderbird | 0 |
| Debian:14 | firefox-esr | 0 |
Timeline
- Dec 22, 2022 CVE Published
- Oct 15, 2026 CVE Updated