CVE-2022-36319: Mozilla Firefox

High severity, CVSS 7.5. EPSS: 0.7% chance of exploitation in the next 30 days.

When combining CSS properties for overflow and transform, the mouse cursor could interact with different coordinates than displayed. This vulnerability affects Firefox ESR < 102.1, Firefox ESR < 91.12, Firefox < 103, Thunderbird < 102.1, and Thunderbird < 91.12.

Affected products

• Mozilla Firefox: before 103.0 (fixed in 103.0)
• Mozilla Firefox ESR: before 102.1 (fixed in 102.1); before 91.12 (fixed in 91.12)
• Mozilla Thunderbird: before 102.1 (fixed in 102.1); before 91.12 (fixed in 91.12)

Published 2022-12-22. Last modified 2026-06-17.