CVE-2022-22736: Mozilla Firefox

High severity, CVSS 7.0. EPSS: 0.2% chance of exploitation in the next 30 days.

If Firefox was installed to a world-writable directory, a local privilege escalation could occur when Firefox searched the current directory for system libraries. However the install directory is not world-writable by default.<br>*This bug only affects Firefox for Windows in a non-default installation. Other operating systems are unaffected.*. This vulnerability affects Firefox < 96.

Affected products

• Mozilla Firefox: before 96.0 (fixed in 96.0)

Published 2022-12-22. Last modified 2026-06-17.