high7.5
CVE-2022-36319
When combining CSS properties for overflow and transform, the mouse cursor could interact with different coordinates than displayed.
Impact
When combining CSS properties for overflow and transform, the mouse cursor could interact with different coordinates than displayed. This vulnerability affects Firefox ESR < 102.1, Firefox ESR < 91.12, Firefox < 103, Thunderbird < 102.1, and Thunderbird < 91.12.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Mozilla | Firefox | before 103.0 |
| Mozilla | Firefox Esr | before 102.1 before 91.12 |
| Mozilla | Thunderbird | before 102.1 before 91.12 |
Weakness classification
References
- NVD record
- CVE.org record
- https://bugzilla.mozilla.org/show_bug.cgi?id=1737722
- https://www.mozilla.org/security/advisories/mfsa2022-28/
- https://www.mozilla.org/security/advisories/mfsa2022-29/
- https://www.mozilla.org/security/advisories/mfsa2022-30/
- https://www.mozilla.org/security/advisories/mfsa2022-31/
- https://www.mozilla.org/security/advisories/mfsa2022-32/