← Database

CVE-2022-22736

HIGH CVSS: 7.0 Published: 2022-12-22 Modified: 2026-06-17

Description

If Firefox was installed to a world-writable directory, a local privilege escalation could occur when Firefox searched the current directory for system libraries. However the install directory is not world-writable by default.
*This bug only affects Firefox for Windows in a non-default installation. Other operating systems are unaffected.*. This vulnerability affects Firefox < 96.

Affected Platforms

Mozilla Firefox

Weakness Type

CWE-427, CWE-427

References