crítica
CVE-2022-26486
Mozilla: Use-after-free in WebGPU IPC Framework
En la Trivy database desde, como mínimo, el 24 oct 2026, 07:11 UTCNo consta cuándo entró antes de ese build.
Severidad por fuente
NVD9.6CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H
Red Hat8.8CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
La etiqueta propia de Trivy es CRITICAL. Crítica según NVD, Red Hat. Más baja según AlmaLinux (alta), Amazon (alta), Oracle (alta), Rocky Linux (alta), Ubuntu (alta).
Descripción
An unexpected message in the WebGPU IPC framework could lead to a use-after-free and exploitable sandbox escape. We have had reports of attacks in the wild abusing this flaw. This vulnerability affects Firefox < 97.0.2, Firefox ESR < 91.6.1, Firefox for Android < 97.3.0, Thunderbird < 91.6.2, and Focus < 97.3.0.
Paquetes afectados y versiones corregidas
| Fuente | Paquete | Corregido en |
|---|---|---|
| Red Hat | firefox, firefox:flatpak::firefox, thunderbird y 1 más | sin corrección indicada |
| alma 8 | firefox, thunderbird | 91.7.0-3.el8_5.alma y 1 más |
| alpine 3.15 | firefox-esr | 91.6.1-r0 |
| alpine 3.16 | firefox, firefox-esr, thunderbird | 97.0.2-r0 y 2 más |
| alpine 3.17 | firefox, firefox-esr, thunderbird | 97.0.2-r0 y 2 más |
| alpine 3.18 | firefox, firefox-esr, thunderbird | 97.0.2-r0 y 2 más |
| alpine 3.19 | firefox, firefox-esr, thunderbird | 97.0.2-r0 y 2 más |
| alpine 3.20 | firefox, firefox-esr, thunderbird | 97.0.2-r0 y 2 más |
| alpine 3.21 | firefox, firefox-esr, librewolf y 1 más | 97.0.2-r0 y 2 más |
| alpine 3.22 | firefox, firefox-esr, librewolf y 1 más | 97.0.2-r0 y 2 más |
| alpine 3.23 | firefox, firefox-esr, librewolf y 1 más | 97.0.2-r0 y 2 más |
| alpine 3.24 | librewolf | 97.0.2-r0 |
Mostrar las 64 entradas de 30 fuentes
| Fuente | Paquete | Corregido en |
|---|---|---|
| Red Hat | firefox | sin corrección indicada |
| Red Hat | firefox:flatpak::firefox | sin corrección indicada |
| Red Hat | thunderbird | sin corrección indicada |
| Red Hat | thunderbird:flatpak::thunderbird | sin corrección indicada |
| alma 8 | firefox | 91.7.0-3.el8_5.alma |
| alma 8 | thunderbird | 91.7.0-2.el8_5.alma |
| alpine 3.15 | firefox-esr | 91.6.1-r0 |
| alpine 3.16 | firefox | 97.0.2-r0 |
| alpine 3.16 | firefox-esr | 91.6.1-r0 |
| alpine 3.16 | thunderbird | 91.6.2-r0 |
| alpine 3.17 | firefox | 97.0.2-r0 |
| alpine 3.17 | firefox-esr | 91.6.1-r0 |
| alpine 3.17 | thunderbird | 91.6.2-r0 |
| alpine 3.18 | firefox | 97.0.2-r0 |
| alpine 3.18 | firefox-esr | 91.6.1-r0 |
| alpine 3.18 | thunderbird | 91.6.2-r0 |
| alpine 3.19 | firefox | 97.0.2-r0 |
| alpine 3.19 | firefox-esr | 91.6.1-r0 |
| alpine 3.19 | thunderbird | 91.6.2-r0 |
| alpine 3.20 | firefox | 97.0.2-r0 |
| alpine 3.20 | firefox-esr | 91.6.1-r0 |
| alpine 3.20 | thunderbird | 91.6.2-r0 |
| alpine 3.21 | firefox | 97.0.2-r0 |
| alpine 3.21 | firefox-esr | 91.6.1-r0 |
| alpine 3.21 | librewolf | 97.0.2-r0 |
| alpine 3.21 | thunderbird | 91.6.2-r0 |
| alpine 3.22 | firefox | 97.0.2-r0 |
| alpine 3.22 | firefox-esr | 91.6.1-r0 |
| alpine 3.22 | librewolf | 97.0.2-r0 |
| alpine 3.22 | thunderbird | 91.6.2-r0 |
| alpine 3.23 | firefox | 97.0.2-r0 |
| alpine 3.23 | firefox-esr | 91.6.1-r0 |
| alpine 3.23 | librewolf | 97.0.2-r0 |
| alpine 3.23 | thunderbird | 91.6.2-r0 |
| alpine 3.24 | librewolf | 97.0.2-r0 |
| alpine edge | librewolf | 97.0.2-r0 |
| amazon linux 2 | thunderbird | 91.7.0-2.amzn2.0.1 |
| amazon linux 2 | thunderbird-debuginfo | 91.7.0-2.amzn2.0.1 |
| debian 10 | firefox-esr | 91.6.1esr-1~deb10u1 |
| debian 10 | thunderbird | 1:91.6.2-1~deb10u1 |
| debian 11 | firefox-esr | 91.6.1esr-1~deb11u1 |
| debian 11 | thunderbird | 1:91.6.2-1~deb11u1 |
| debian 12 | firefox-esr | 91.6.1esr-1 |
| debian 12 | thunderbird | 1:91.6.2-1 |
| debian 13 | firefox-esr | 91.6.1esr-1 |
| debian 13 | thunderbird | 1:91.6.2-1 |
| debian 14 | firefox-esr | 91.6.1esr-1 |
| debian 14 | thunderbird | 1:91.6.2-1 |
| debian 9 | firefox-esr | 91.6.1esr-1~deb9u1 |
| debian 9 | thunderbird | 1:91.6.2-1~deb9u1 |
| echo | firefox-esr | 91.6.1esr-1 |
| echo | thunderbird | 1:91.6.2-1 |
| Oracle Linux 7 | firefox | 91.7.0-3.0.1.el7_9 |
| Oracle Linux 7 | thunderbird | 91.7.0-2.0.1.el7_9 |
| Oracle Linux 8 | firefox | 91.7.0-3.0.1.el8_5 |
| Oracle Linux 8 | thunderbird | 91.7.0-2.0.1.el8_5 |
| rocky 8 | firefox | 91.7.0-3.el8_5 |
| rocky 8 | thunderbird | 91.7.0-2.el8_5 |
| ubuntu 18.04 | firefox | 97.0.2+build1-0ubuntu0.18.04.1 |
| ubuntu 20.04 | firefox | 97.0.2+build1-0ubuntu0.20.04.1 |
| ubuntu 21.10 | firefox | 97.0.2+build1-0ubuntu0.21.10.1 |
| ubuntu 22.04 | firefox | 1:1snap1-0ubuntu1 |
| ubuntu 22.10 | firefox | 1:1snap1-0ubuntu1 |
| ubuntu 23.04 | firefox | 1:1snap1-0ubuntu1 |
Referencias
- https://access.redhat.com/errata/RHSA-2022:0845
- https://access.redhat.com/security/cve/CVE-2022-26486
- https://bugzilla.mozilla.org/show_bug.cgi?id=1758070
- https://bugzilla.redhat.com/show_bug.cgi?id=2055591
- https://bugzilla.redhat.com/show_bug.cgi?id=2056363
- https://bugzilla.redhat.com/show_bug.cgi?id=2056366
- https://bugzilla.redhat.com/show_bug.cgi?id=2056370
- https://bugzilla.redhat.com/show_bug.cgi?id=2061735
Las 36 referencias
- https://bugzilla.redhat.com/show_bug.cgi?id=2061736
- https://bugzilla.redhat.com/show_bug.cgi?id=2062220
- https://bugzilla.redhat.com/show_bug.cgi?id=2062221
- https://bugzilla.redhat.com/show_bug.cgi?id=2062222
- https://bugzilla.redhat.com/show_bug.cgi?id=2062223
- https://bugzilla.redhat.com/show_bug.cgi?id=2062224
- https://creativecommons.org/licenses/by/4.0/
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-0566
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-25235
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-25236
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-25315
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-26381
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-26383
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-26384
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-26386
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-26387
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-26485
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-26486
- https://errata.rockylinux.org/RLSA-2022:0845
- https://linux.oracle.com/cve/CVE-2022-26486.html
- https://linux.oracle.com/errata/ELSA-2022-0850.html
- https://nvd.nist.gov/vuln/detail/CVE-2022-26486
- https://ubuntu.com/security/notices/USN-5314-1
- https://www.cisa.gov/known-exploited-vulnerabilities-catalog
- https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2022-26486
- https://www.cve.org/CVERecord?id=CVE-2022-26486
- https://www.mozilla.org/en-US/security/advisories/mfsa2022-09/#CVE-2022-26486
- https://www.mozilla.org/security/advisories/mfsa2022-09/