CVE-2022-34477: Mozilla Firefox

High severity, CVSS 7.5. EPSS: 0.6% chance of exploitation in the next 30 days.

The MediaError message property should be consistent to avoid leaking information about cross-origin resources; however for a same-site cross-origin resource, the message could have leaked information enabling XS-Leaks attacks. This vulnerability affects Firefox < 102.

Affected products

• Mozilla Firefox: before 102.0 (fixed in 102.0)

Published 2022-12-22. Last modified 2026-06-17.