Prototype Pollution Vulnerability in Firefox ESR and Thunderbird by Mozilla

CVE-2022-1529

What is CVE-2022-1529?

A vulnerability exists in Mozilla's Firefox ESR, Firefox for Android, and Thunderbird products that allows an attacker to send specially crafted messages to the parent process. This can lead to double-indexing within a JavaScript object, resulting in prototype pollution. Consequently, this may enable attackers to execute arbitrary JavaScript code in the context of the privileged parent process, posing significant security risks to users.

References