{
  "cveId": "CVE-2022-22753",
  "url": "https://patchblox.com/security/cve/CVE-2022-22753",
  "summary": "CVE-2022-22753 is fixed in 3 products on 1 platform, first by Mozilla Firefox (en-US) 97.0, released February 8, 2022. It is not reported as exploited. Patch Radar priority: High.",
  "title": "Mozilla Firefox ESR and 4 others: Time-of-check Time-of-use (TOCTOU) Race Condition",
  "description": "A Time-of-Check Time-of-Use bug existed in the Maintenance (Updater) Service that could be abused to grant Users write access to an arbitrary directory. This could have been used to escalate to SYSTEM access.\u003Cbr\u003E*This bug only affects Firefox on Windows. Other operating systems are unaffected.*. This vulnerability affects Firefox \u003C 97, Thunderbird \u003C 91.6, and Firefox ESR \u003C 91.6.",
  "published": "2022-12-22T20:15:17Z",
  "severity": "",
  "cvss": 7.1,
  "cwe": "CWE-367: Time-of-check Time-of-use (TOCTOU) Race Condition",
  "epss": 0.00651,
  "epssPercentile": 0.51452,
  "priority": "High",
  "priorityTier": 3,
  "exploited": false,
  "vendorExploited": false,
  "disclosed": false,
  "vendorAdvisory": "https://nvd.nist.gov/vuln/detail/CVE-2022-22753",
  "fixes": [
    {
      "platform": "windows-app",
      "product": "Mozilla Firefox (en-US)",
      "fixedVersion": "97.0",
      "fix": "Mozilla Firefox (en-US) 97.0",
      "url": "https://patchblox.com/security/fix/windows-app/mozilla.firefox-97.0",
      "released": "2022-02-08T00:00:00Z"
    },
    {
      "platform": "windows-app",
      "product": "Mozilla Firefox ESR (en-US)",
      "fixedVersion": "102.0",
      "fix": "Mozilla Firefox ESR (en-US) 102.0",
      "url": "https://patchblox.com/security/fix/windows-app/mozilla.firefox.esr-102.0",
      "released": "2022-06-23T00:00:00Z"
    },
    {
      "platform": "windows-app",
      "product": "Mozilla Thunderbird (en-US)",
      "fixedVersion": "91.6.0",
      "fix": "Mozilla Thunderbird (en-US) 91.6.0",
      "url": "https://patchblox.com/security/fix/windows-app/mozilla.thunderbird-91.6.0",
      "released": "2022-02-08T00:00:00Z"
    }
  ],
  "noFixYet": [],
  "dataAsOf": "2026-11-08T06:59:42Z",
  "attribution": {
    "text": "Data: Patchblox Patch Radar",
    "url": "https://patchblox.com/security/patch-radar",
    "terms": "https://patchblox.com/security/patch-radar/use-the-data"
  }
}