CVE Vulnerabilities

CVE-2022-26386

Published: Dec 22, 2022 | Modified: Jan 23, 2023
CVSS 3.x
6.5
MEDIUM
Source:
NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
CVSS 2.x
RedHat/V2
RedHat/V3
Ubuntu

Previously Firefox for macOS and Linux would download temporary files to a user-specific directory in /tmp, but this behavior was changed to download them to /tmp where they could be affected by other local users. This behavior was reverted to the original, user-specific directory. This bug only affects Firefox for macOS and Linux. Other operating systems are unaffected.. This vulnerability affects Firefox ESR < 91.7 and Thunderbird < 91.7.

Affected Software

Name Vendor Start Version End Version
Firefox_esr Mozilla * 91.7 (excluding)
Thunderbird Mozilla * 91.7 (excluding)

References