Home/CVEs/CVE-2022-26486/

CVE-2022-26486 - Mozilla Firefox Use-After-Free Vulnerability

Project:Mozilla

Product:Firefox

Date Added:2022-03-07Due Date:2022-03-21

Vulnerability Name

Mozilla Firefox Use-After-Free Vulnerability

Description

Mozilla Firefox contains a use-after-free vulnerability in WebGPU IPC Framework which can be exploited to perform arbitrary code execution.

Known To Be Used in Ransomware Campaigns?

Unknown

Action

Apply updates per vendor instructions.

Additional Notes

https://nvd.nist.gov/vuln/detail/CVE-2022-26486