CVE-2022-1802
HIGH EXPLOITED IN THE WILDFirefox < 100.0.2, Firefox ESR < 91.9.1, Thunderbird < 91.9.1 - Privileged JavaScript Execution via Prototype Pollution
Title source: llmExploitation Summary
CVE-2022-1802 has been observed exploited in the wild (reported by VulnCheck KEV, InTheWild.io). EIP tracks 1 public exploit from researchers including mistymntncop.
AI-analyzed exploit summary This is a working exploit PoC for CVE-2022-1802, targeting a type confusion vulnerability in Firefox 100.0.1. It leverages memory corruption to achieve arbitrary read/write primitives, enabling potential RCE.
Description
If an attacker was able to corrupt the methods of an Array object in JavaScript via prototype pollution, they could have achieved execution of attacker-controlled JavaScript code in a privileged context. This vulnerability affects Firefox ESR < 91.9.1, Firefox < 100.0.2, Firefox for Android < 100.3.0, and Thunderbird < 91.9.1.
Exploits (1)
This is a working exploit PoC for CVE-2022-1802, targeting a type confusion vulnerability in Firefox 100.0.1. It leverages memory corruption to achieve arbitrary read/write primitives, enabling potential RCE.
References (2)
Scores
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H