CVE-2022-26485
CISA KEV
ACT NOW
Priority: 0.00
BB Relevance:
3/100
Published: N/A
Modified: N/A
First seen: 2026-10-29
Status: pending_score
Description
Mozilla Firefox contains a use-after-free vulnerability in XSLT parameter processing which can be exploited to perform arbitrary code execution.
CISA Known Exploited Vulnerability
Vendor / Product
Mozilla — Firefox
Date Added
2022-03-07
Remediation Due
2022-03-21
https://nvd.nist.gov/vuln/detail/CVE-2022-26485
Weakness Classification (1)
Affected Software (5)
| Vendor | Product | Version |
|---|---|---|
| mozilla | firefox | < 91.6.1 |
| mozilla | firefox | < 97.0.2 |
| mozilla | firefox_focus | < 97.3.0 |
| mozilla | firefox_mobile | < 97.3.0 |
| mozilla | thunderbird | < 91.6.2 |
References & Advisories (3)
Vendor Advisory
US Government Resource
Exploit
Issue Tracking
Vendor Advisory