Mozilla Fixes Firefox Privilege Escalation Vulnerability

Share post:

Mozilla has fixed the privilege escalation vulnerability in the Firefox 97 security update known as CVE-2022-22753.

Once the vulnerability is successfully exploited on unpatched systems, attackers can escalate their privileges to the highest level of privileges on a Windows system. Mozilla says the flaw “only affects Firefox on Windows. Other operating systems are unaffected.”

Other fixes that Firefox 97 fixes include several memory safety bugs found by Mozilla developers and the community in Firefox 96 and Firefox ESR 91.5.

Mozilla warned that systems running vulnerable versions of Firefox could be exploited to cause a heap-based buffer overflow.

Some likely consequences are program crashes, the execution of arbitrary code, and the bypass of security software once code execution is achieved.

Affected are all PDF viewers and email clients using NSS versions that have been approved for signature verification since October 2012.

Other updates to Firefox 97 include support for the new style of scrollbars on Windows 11. The new version removes support for direct generation of PostScript for printing on Linux. Printing to PostScript is still available as a supported option, however.

For more information, read the original story in BleepingComputer.


Related articles

Cyber Security Today, Week in Review for week ending Friday May 17, 2024

Welcome to Cyber Security Today. This is the Week in Review for the week ending Friday, May 17th,...

Cyber Security Today, May 17, 2024 – Malware hiding in Apache Tomcat servers

Malware hiding in Apache Tomcat servers, new backdoors found, and more Welcome to Cyber Security Today. It's Friday, May...

MIT students exploit blockchain vulnerability to steal 25 million dollars

Two MIT students have been implicated in a highly sophisticated cryptocurrency heist, where they reportedly exploited a vulnerability...

Cyber Security Today, May 15, 2024 – Ebury botnet still exploits Linux servers, Microsoft, SAP and Apple issue security updates

The Ebury botnet continues to exploit Linux servers, Microsoft, SAP and Apple issue security updates, and more. Welcome to...

Become a member

New, Relevant Tech Stories. Our article selection is done by industry professionals. Our writers summarize them to give you the key takeaways