AUGUST 4, 2026
Live Feed
Back to database
Case File

CVE-2022-22756

HIGH · CVSS 8.8 EPSS 0.93%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2022-12-22 · Last synced 2026-08-04

CyberRota Analysis

This is a high severity vulnerability with a CVSS score of 8.8. It affects Firefox.

CVE
CVE-2022-22756
Severity
HIGH
CVSS
8.8
EPSS
0.93%
Firefox

Original NVD Description

If a user was convinced to drag and drop an image to their desktop or other folder, the resulting object could have been changed into an executable script which would have run arbitrary code after the user clicked on it. This vulnerability affects Firefox < 97, Thunderbird < 91.6, and Firefox ESR < 91.6.

Related CVEs

Other vulnerabilities affecting the same vendor(s)

CVE-2026-16412 CRITICAL CVE-2026-16411 CRITICAL CVE-2026-16410 CRITICAL CVE-2026-16409 HIGH CVE-2026-16408 CRITICAL CVE-2026-16407 CRITICAL