CVE-2022-26383

MEDIUM4.3

When resizing a popup after requesting fullscreen access, the popup would not display the fullscreen notification

Published Dec 22, 2022

Modified 1 years ago

Fix available

Details

When resizing a popup after requesting fullscreen access, the popup would not display the fullscreen notification. This vulnerability affects Firefox < 98, Firefox ESR < 91.7, and Thunderbird < 91.7.

Affected Packages(11 packages)

Firefox

SnapWindows 10 (1507)Windows 10 (1607) / Server 2016Windows 10 (1703)Windows 10 (1709)

Fixed in:

98

Firefox ESR

Windows 10 (1507)Windows 10 (1607) / Server 2016Windows 10 (1703)Windows 10 (1709)Windows 10 (1803)

Fixed in:

91.7

Mozilla Firefox

Windows 10 (1507)Windows 10 (1607) / Server 2016Windows 10 (1703)Windows 10 (1709)Windows 10 (1803)

Fixed in:

98

Mozilla Firefox ESR

Windows 10 (1507)Windows 10 (1607) / Server 2016Windows 10 (1703)Windows 10 (1709)Windows 10 (1803)

Fixed in:

91.7

Mozilla Thunderbird

Windows 10 (1507)Windows 10 (1607) / Server 2016Windows 10 (1703)Windows 10 (1709)Windows 10 (1803)

Fixed in:

91.7

Mozilla Thunderbird ESR

Windows 10 (1507)Windows 10 (1607) / Server 2016Windows 10 (1703)Windows 10 (1709)Windows 10 (1803)

Fixed in:

91.7

Mozilla.Firefox

Windows 10 (1507)Windows 10 (1607) / Server 2016Windows 10 (1703)Windows 10 (1709)Windows 10 (1803)

Fixed in:

98

MozillaThunderbird.MZLA

Windows 10 (1507)Windows 10 (1607) / Server 2016Windows 10 (1703)Windows 10 (1709)Windows 10 (1803)

Fixed in:

91.7

Thunderbird

Windows 10 (1507)Windows 10 (1607) / Server 2016Windows 10 (1703)Windows 10 (1709)Windows 10 (1803)

Fixed in:

91.7

firefox

brew

Fixed in:

98

References

https://bugzilla.mozilla.org/show_bug.cgi?id=1742421

https://www.cve.org/CVERecord?id=CVE-2022-26383

https://www.mozilla.org/security/advisories/mfsa2022-10/

https://www.mozilla.org/security/advisories/mfsa2022-11/

https://www.mozilla.org/security/advisories/mfsa2022-12/

CVSS Analysis

CVSS v3.1

4.3

Exploitability

Attack Vector

NetworkAV:N

Attack Complexity

LowAC:L

Privileges Required

NonePR:N

User Interaction

RequiredUI:R

Scope

Scope

UnchangedS:U

Impact

Confidentiality

NoneC:N

Integrity

LowI:L

Availability

NoneA:N

4.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N

Ecosystems(32)

Snap Windows 10 (1507)Windows 10 (1607) / Server 2016 Windows 10 (1703)Windows 10 (1709)

Timeline

PublishedDec 22, 2022

ModifiedApr 16, 2025

CVE-2022-26383 | Mondoo Vulnerability Intelligence