CVE-2022-42931: Mozilla Firefox

Low severity, CVSS 3.3. EPSS: 0.1% chance of exploitation in the next 30 days.

Logins saved by Firefox should be managed by the Password Manager component which uses encryption to save files on-disk. Instead, the username (not password) was saved by the Form Manager to an unencrypted file on disk. This vulnerability affects Firefox < 106.

Affected products

• Mozilla Firefox: before 106.0 (fixed in 106.0)

Published 2022-12-22. Last modified 2026-06-17.