Security Advisory
CVE-2022-38476
7.5
HIGH
Vulnerability Description
A data race could occur in the
PK11_ChangePW function, potentially leading to a use-after-free vulnerability. In Firefox, this lock protected the data when a user changed their master password. This vulnerability affects Firefox ESR < 102.2 and Thunderbird < 102.2.
Published Date
December 22, 2022
Official Source
NIST NVD Advisory