Mozilla Focus vulnerabilities

3 published CVEs name Mozilla Focus among the affected products; CISA lists 2 of them as exploited in the wild.

Known exploited

Newest addition to KEV first.

CVE-2022-26485
Removing an XSLT parameter during processing could have lead to an exploitable use-after-free. We have had reports of attacks in the wild abusing this flaw.…
Mozilla · Firefox
ExploitedHigh8.8
CVE-2022-26486
An unexpected message in the WebGPU IPC framework could lead to a use-after-free and exploitable sandbox escape. We have had reports of attacks in the wild…
Mozilla · Firefox
ExploitedCritical9.6