CVE-2022-36316: Mozilla Firefox

Medium severity, CVSS 6.1. EPSS: 0.3% chance of exploitation in the next 30 days.

When using the Performance API, an attacker was able to notice subtle differences between PerformanceEntries and thus learn whether the target URL had been subject to a redirect. This vulnerability affects Firefox < 103.

Affected products

• Mozilla Firefox: before 103.0 (fixed in 103.0)

Published 2022-12-22. Last modified 2026-06-17.