Mozilla Firefox and Thunderbird Type Confusion Vulnerability
Mozilla · Firefox and Thunderbird
Date added (CISA)
2022-05-23
Remediation due
2022-06-13
Known ransomware use
Not indicated
Remediation priority
P2 — past CISA due date
Description
Mozilla Firefox and Thunderbird contain a type confusion vulnerability that can occur when manipulating JavaScript objects due to issues in Array.pop, allowing for an exploitable crash.