CVE:CVE-2022-40959
CNNVD:CNNVD-202209-1598
Mozilla Firefox是美国Mozilla基金会的一款开源Web浏览器。
Mozilla Firefox 105 之前版本存在安全漏洞，该漏洞源于在iframe导航期间，某些页面的FeaturePolicy没有完全初始化，从而导致绕过将设备权限泄漏到不受信任的子文档中。
solution:Upgrade mozilla firefox to a higher version than 105.0,and avoid the version (,105.0); Upgrade mozilla firefox_esr to a higher version than 102.3,and avoid the version (,102.3); Upgrade mozilla thunderbird to a higher version than 102.3,and avoid the version (,102.3)