CVE-2022-26385: Mozilla Firefox

Medium severity, CVSS 6.5. EPSS: 0.6% chance of exploitation in the next 30 days.

In unusual circumstances, an individual thread may outlive the thread's manager during shutdown. This could have led to a use-after-free causing a potentially exploitable crash. This vulnerability affects Firefox < 98.

Affected products

• Mozilla Firefox: before 98.0 (fixed in 98.0)

Published 2022-12-22. Last modified 2026-06-17.