 |
Home ▼ Bookkeeping
Online ▼ Security
Audits ▼
Managed
DNS ▼
About
Order
FAQ
Acceptable Use Policy
Dynamic DNS Clients
Configure Domains Dyanmic DNS Update Password Network
Monitor ▼
Enterprise Package
Advanced Package
Standard Package
Free Trial
FAQ
Price/Feature Summary
Order/Renew
Examples
Configure/Status Alert Profiles | ||
| CVE ID: | CVE-2022-40959 |
| Description: | During iframe navigation, certain pages did not have their FeaturePolicy fully initialized leading to a bypass that leaked device permissions into untrusted subdocuments. This vulnerability affects Firefox ESR < 102.3, Thunderbird < 102.3, and Firefox < 105. |
| Test IDs: | None available |
| Cross References: |
Common Vulnerability Exposure (CVE) ID: CVE-2022-40959 https://bugzilla.mozilla.org/show_bug.cgi?id=1782211 https://bugzilla.mozilla.org/show_bug.cgi?id=1782211 https://www.mozilla.org/security/advisories/mfsa2022-40/ https://www.mozilla.org/security/advisories/mfsa2022-40/ https://www.mozilla.org/security/advisories/mfsa2022-41/ https://www.mozilla.org/security/advisories/mfsa2022-41/ https://www.mozilla.org/security/advisories/mfsa2022-42/ https://www.mozilla.org/security/advisories/mfsa2022-42/ |