CVE Daily

CVE-2022-46872

An attacker who compromised a content process could have partially escaped the s...

High CVSS 8.6

Overview

An attacker who compromised a content process could have partially escaped the sandbox to read arbitrary files via clipboard-related IPC messages.<br>*This bug only affects Thunderbird for Linux. Other operating systems are unaffected.*. This vulnerability affects Firefox < 108, Firefox ESR < 102.6, and Thunderbird < 102.6.

CWE: CWE-125 Published: 2022-12-22T20:15:45.817
Risk analysis

This vulnerability is rated 🟠 HIGH.

  • CVSS: 8.6 (HIGH)
  • Detected tags: none (tag impact: LOW)

Recommended actions:

  • Prioritize remediation based on business criticality and exposure.
  • Limit exposure and increase monitoring until fixed.

Recommended tools

Tags