CVE-2022-36316

6.1 mediumEPSS 0.3%

Medium (6.1) in mozilla firefox. EPSS 0.3% chance of exploitation in the next 30 days.

When using the Performance API, an attacker was able to notice subtle differences between PerformanceEntries and thus learn whether the target URL had been subject to a redirect. This vulnerability affects Firefox < 103.

Severity

CVSS 3.1

6.1 medium

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

EPSS: 0.3% chance of exploitation in the next 30 days; higher than 27% of CVEs (scores of 2026-10-31)
CWE: CWE-601
Published: 2022-12-22
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

mozilla:firefox

References

https://bugzilla.mozilla.org/show_bug.cgi?id=1768583
https://www.mozilla.org/security/advisories/mfsa2022-28/
https://bugzilla.mozilla.org/show_bug.cgi?id=1768583
https://www.mozilla.org/security/advisories/mfsa2022-28/

Check your stack JSON