CVE

CVE-2022-26485

Mozilla Firefox Use-After-Free Vulnerability

Mozilla · Firefox

Date added (CISA)

2022-03-07

Remediation due

2022-03-21

Known ransomware use

Not indicated

Remediation priority

P2 — past CISA due date

Description

Mozilla Firefox contains a use-after-free vulnerability in XSLT parameter processing which can be exploited to perform arbitrary code execution.