CVE-2022-22750: Mozilla Firefox

Medium severity, CVSS 6.5. EPSS: 0.6% chance of exploitation in the next 30 days.

By generally accepting and passing resource handles across processes, a compromised content process might have confused higher privileged processes to interact with handles that the unprivileged process should not have access to.<br>*This bug only affects Firefox for Windows and MacOS. Other operating systems are unaffected.*. This vulnerability affects Firefox < 96.

Affected products

• Mozilla Firefox: before 96.0 (fixed in 96.0)

Published 2022-12-22. Last modified 2026-06-17.