Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
7.1
CVE-2022-42930: If two Workers were simultaneously initializing their CacheStorage, a data race could have occurred in the `ThirdPartyUtil` component. This vulnerability affects Firefox < 106.
CVE-2022-42930 · published 3 years ago
Summary
If two Workers were simultaneously initializing their CacheStorage, a data race could have occurred in the `ThirdPartyUtil` component. This vulnerability affects Firefox < 106.
What to do
- Update mozilla firefox to version 106.0 or later.
Affected software
| Vendor | Product | Affected versions |
|---|---|---|
| mozilla | firefox |
< 106.0 cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:* |
Original advisory text
If two Workers were simultaneously initializing their CacheStorage, a data race could have occurred in the `ThirdPartyUtil` component. This vulnerability affects Firefox < 106.
If two Workers were simultaneously initializing their CacheStorage, a data race could have occurred in the `ThirdPartyUtil` component. This vulnerability affects Firefox < 106.
References
- https://bugzilla.mozilla.org/show_bug.cgi?id=1789503 Issue Tracking Permissions Required Vendor Advisory
- https://www.mozilla.org/security/advisories/mfsa2022-44/ Vendor Advisory
Internet-facing
14 days
Internal
At next upgrade
- Not known to be exploited
- Needs hands-on effort to exploit
- Gives an attacker full control
Type
CWE-362Race Condition
Timeline
Published22 Dec 2022
Updated4 Nov 2026
First seen29 Sep 2026
Sources
CVE-2022-42930 · NVD
Track software like this
Free during beta