Firetruck

CVE-2022-26485

KEV
Updated Oct 21, 2025 · PUBLISHED
View KEV entry →

Description

Mozilla Firefox contains a use-after-free vulnerability in XSLT parameter processing which can be exploited to perform arbitrary code execution.

Full record on cve.org →

Affected packages

PackageVendor / ProductVersion rangeStatus
FirefoxMozilla / Firefox>= unspecified, < 97.0.2affected
Firefox ESRMozilla / Firefox ESR>= unspecified, < 91.6.1affected
Firefox for AndroidMozilla / Firefox for Android>= unspecified, < 97.3.0affected
FocusMozilla / Focus>= unspecified, < 97.3.0affected
ThunderbirdMozilla / Thunderbird>= unspecified, < 91.6.2affected