{"vulnerability": "CVE-2022-26486", "sightings": [{"uuid": "fa122aa9-4232-43bd-916c-23e352f69f05", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-26486", "type": "seen", "source": "MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123", "content": "", "creation_timestamp": "2023-06-14T21:10:04.000000Z"}, {"uuid": "f769ae1a-5f06-4d11-8ad6-302a201c36b1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-26486", "type": "seen", "source": "https://feedsin.space/feed/CISAKevBot/items/2971373", "content": "", "creation_timestamp": "2024-12-24T20:28:22.312026Z"}, {"uuid": "9d781c9e-2b56-4908-a23d-82131a1087a5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-26486", "type": "seen", "source": "MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123", "content": "", "creation_timestamp": "2025-02-23T02:10:36.000000Z"}, {"uuid": "11df490f-a667-4d2c-b7e8-7123db2748e0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2022-26486", "type": "seen", "source": "https://www.govcert.gov.hk/en/alerts_detail.php?id=749", "content": "", "creation_timestamp": "2022-03-07T04:00:00.000000Z"}, {"uuid": "9c6b08b5-017b-490e-9cd7-ffd6aca21b98", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "af0120d0-3dac-4a6a-974b-a9f33d2a9846", "vulnerability": "CVE-2022-26486", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/c5376e9e-494b-4716-baca-0eb64d393066", "content": "", "creation_timestamp": "2026-02-02T12:28:09.996394Z"}, {"uuid": "973b746f-c6b8-4698-8f39-fe534f82e924", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-26486", "type": "seen", "source": "https://t.me/cKure/8957", "content": "\u25a0\u25a0\u25a0\u25a0\u25a0 Zero-Day: CVE-2022-26485 and CVE-2022-26486, the zero-day flaws have been described as use-after-free issues impacting the Extensible Stylesheet Language Transformations (XSLT) parameter processing and the WebGPU inter-process communication (IPC) Framework.\n\nXSLT is an XML-based language used for the conversion of XML documents into web pages or PDF documents, whereas WebGPU is an emerging web standard that's been billed as a successor to the current WebGL JavaScript graphics library.\n\nThe description of the two flaws is below \u2013\n\nCVE-2022-26485 \u2013 Removing an XSLT parameter during processing could lead to an exploitable use-after-free\n\nCVE-2022-26486 \u2013 An unexpected message in the WebGPU IPC framework could lead to a use-after-free and exploitable sandbox escape\n\nhttps://thehackernews.com/2022/03/2-new-mozilla-firefox-0-day-bugs-under.html", "creation_timestamp": "2022-03-07T06:12:15.000000Z"}, {"uuid": "af5d0266-8f43-4c71-b4a3-c43eb438ac47", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-26486", "type": "exploited", "source": "https://t.me/true_secator/3717", "content": "Mozilla \u043e\u0431\u044a\u044f\u0432\u0438\u043b\u0430 \u043e \u0432\u044b\u043f\u0443\u0441\u043a\u0435 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u043d\u043e\u0439 Firefox 107, \u0432 \u043a\u043e\u0442\u043e\u0440\u043e\u0439 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043e \u0437\u043d\u0430\u0447\u0438\u0442\u0435\u043b\u044c\u043d\u043e\u0435 \u043a\u043e\u043b\u0438\u0447\u0435\u0441\u0442\u0432\u043e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439.\n\n\u0412 \u043e\u0431\u0449\u0435\u0439 \u0437\u0430\u043a\u0440\u044b\u0442\u043e 19 CVE, \u0434\u0435\u0432\u044f\u0442\u0438 \u0438\u0437 \u043d\u0438\u0445 \u0431\u044b\u043b \u043f\u0440\u0438\u0441\u0432\u043e\u0435\u043d \u0440\u0435\u0439\u0442\u0438\u043d\u0433 \u0432\u044b\u0441\u043e\u043a\u043e\u0433\u043e \u0441\u0442\u0435\u043f\u0435\u043d\u0438 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u043e\u0441\u0442\u0438.\n\n\u041a \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u044b\u043c \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043a\u0430\u043c \u043e\u0442\u043d\u043e\u0441\u044f\u0442\u0441\u044f \u043e\u0448\u0438\u0431\u043a\u0430 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u043f\u0430\u043c\u044f\u0442\u0438 \u0438 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u044b \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u044f \u043f\u043e\u0441\u043b\u0435 \u043e\u0441\u0432\u043e\u0431\u043e\u0436\u0434\u0435\u043d\u0438\u044f, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043c\u043e\u0433\u0443\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u0440\u0430\u0441\u043a\u0440\u044b\u0442\u0438\u044e \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438.\n\n\u041a\u0440\u043e\u043c\u0435 \u0442\u043e\u0433\u043e, \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043e\u0431\u0445\u043e\u0434\u0430 \u043f\u043e\u043b\u043d\u043e\u044d\u043a\u0440\u0430\u043d\u043d\u044b\u0445 \u0443\u0432\u0435\u0434\u043e\u043c\u043b\u0435\u043d\u0438\u0439 \u043f\u0440\u0438\u0432\u043e\u0434\u0438\u0442 \u043a \u0441\u043f\u0443\u0444\u0438\u043d\u0433\u043e\u0432\u044b\u043c \u0430\u0442\u0430\u043a\u0430\u043c, \u0441\u0431\u043e\u044f\u043c \u0432 \u0440\u0430\u0431\u043e\u0442\u0435 \u0438\u043b\u0438 RCE.\n\n\u041f\u0440\u043e\u0431\u043b\u0435\u043c\u044b \u0441\u0440\u0435\u0434\u043d\u0435\u0439 \u0441\u0442\u0435\u043f\u0435\u043d\u0438 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u043e\u0441\u0442\u0438 \u043c\u043e\u0433\u0443\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u043e\u0431\u0445\u043e\u0434\u0443 \u0441\u0438\u0441\u0442\u0435\u043c\u044b \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438, \u043c\u0435\u0436\u0441\u0430\u0439\u0442\u043e\u0432\u043e\u0439 \u0442\u0440\u0430\u0441\u0441\u0438\u0440\u043e\u0432\u043a\u0435, \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044e \u043a\u043e\u0434\u0430, \u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0430\u0446\u0438\u0438 \u0447\u0435\u0440\u0435\u0437 \u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0443 \u0444\u0430\u0439\u043b\u043e\u0432, \u0443\u0442\u0435\u0447\u043a\u0435 \u043d\u0430\u0436\u0430\u0442\u0438\u0439 \u043a\u043b\u0430\u0432\u0438\u0448 \u0438 \u0430\u0442\u0430\u043a\u0430\u043c \u0441\u043f\u0443\u0444\u0438\u043d\u0433\u0430.\n\n\u041d\u0435\u0437\u043d\u0430\u0447\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0435 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u044b, \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u044b\u0435 \u0432 Firefox, \u0441\u0432\u044f\u0437\u0430\u043d\u044b \u0441 \u0438\u0441\u043a\u043b\u044e\u0447\u0435\u043d\u0438\u044f\u043c\u0438 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0438 \u0441\u043f\u0443\u0444\u0438\u043d\u0433\u043e\u043c.\n\n\u041d\u0435\u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u044e\u0442 \u043b\u0438\u0448\u044c Firefox \u0434\u043b\u044f Android, \u0432 \u0442\u043e \u0432\u0440\u0435\u043c\u044f \u043a\u0430\u043a \u0434\u0440\u0443\u0433\u0438\u0435 \u0432\u043b\u0438\u044f\u044e\u0442 \u043d\u0430 \u0432\u0441\u0435 \u041e\u0421 \u043d\u0430 \u0431\u0430\u0437\u0435 Unix.\n\n\u041c\u043d\u043e\u0433\u0438\u0435 \u0438\u0437 \u0431\u0430\u0433 \u0432 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0431\u044b\u043b\u0438 \u0442\u0430\u043a\u0436\u0435 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u044b \u0432 Thunderbird \u0441 \u0432\u044b\u043f\u0443\u0441\u043a\u043e\u043c \u0432\u0435\u0440\u0441\u0438\u0438 102.5.\n\n\u041d\u0435\u0441\u043c\u043e\u0442\u0440\u044f \u043d\u0430 \u043c\u0435\u043d\u044c\u0448\u0443\u044e \u0432\u043e\u0441\u0442\u0440\u0435\u0431\u043e\u0432\u0430\u043d\u043d\u043e\u0441\u0442\u044c Firefox \u0441\u0440\u0435\u0434\u0438 \u0445\u0430\u043a\u0435\u0440\u043e\u0432 \u043f\u043e \u0441\u0440\u0430\u0432\u043d\u0435\u043d\u0438\u044e \u0441 \u0442\u0435\u043c Chrome, \u0435\u0433\u043e \u043f\u043e\u043f\u0443\u043b\u044f\u0440\u043d\u043e\u0441\u0442\u044c \u0441\u0440\u0435\u0434\u0438 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u043f\u043e-\u043f\u0440\u0435\u0436\u043d\u0435\u043c\u0443 \u0434\u0435\u043b\u0430\u0435\u0442 \u0437\u0430\u043c\u0430\u043d\u0447\u0438\u0432\u043e\u0439 \u0446\u0435\u043b\u044c\u044e.\n\n\u041f\u0440\u0438 \u044d\u0442\u043e\u043c \u0440\u0430\u043d\u0435\u0435 \u0432 \u044d\u0442\u043e\u043c \u0433\u043e\u0434\u0443 \u0434\u0432\u0435 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0431\u0440\u0430\u0443\u0437\u0435\u0440\u0430 CVE-2022-26485 \u0438 CVE-2022-26486\u00a0\u0443\u0436\u0435 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b\u0438\u0441\u044c \u0432 \u0440\u0435\u0430\u043b\u044c\u043d\u044b\u0445 \u0430\u0442\u0430\u043a\u0430\u0445.", "creation_timestamp": "2022-11-17T10:42:44.000000Z"}, {"uuid": "2a30d02a-74c5-4c65-9298-e23385a4fcf1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-26486", "type": "exploited", "source": "https://t.me/thehackernews/1952", "content": "Mozilla has warned hundreds of millions of Firefox users about newly discovered 0-day bugs (CVE-2022-26485, CVE-2022-26486) that are being exploited in the wild.\n\nhttps://thehackernews.com/2022/03/2-new-mozilla-firefox-0-day-bugs-under.html\n\nUpdate to Firefox 97.0.2, ESR 91.6.1, Android v97.3.0, Focus 97.3.0 & Thunderbird 91.6.2.", "creation_timestamp": "2022-03-07T05:42:50.000000Z"}, {"uuid": "1443d204-58ef-428d-b337-e1126ebb076a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-26486", "type": "seen", "source": "https://t.me/bitbaanlab/704", "content": "\u2b55\ufe0f \u0647\u0634\u062f\u0627\u0631 \u0641\u0648\u0631\u06cc \u2b55\ufe0f\n\n*** \u0645\u0631\u0648\u0631\u06af\u0631 \u0641\u0627\u06cc\u0631\u0641\u0627\u06a9\u0633 \u062e\u0648\u062f \u0631\u0627 \u0647\u0645\u06cc\u0646 \u0627\u0644\u0627\u0646 \u0628\u0647\u200c\u0631\u0648\u0632\u0631\u0633\u0627\u0646\u06cc \u06a9\u0646\u06cc\u062f***\n\n\u26a0\ufe0f \u0627\u062e\u06cc\u0631\u0627 \u062f\u0648 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc \u0628\u0633\u06cc\u0627\u0631 \u062d\u0633\u0627\u0633 \u062f\u0631 \u0628\u0631\u062e\u06cc \u0645\u062d\u0635\u0648\u0644\u0627\u062a \u0645\u0648\u0632\u06cc\u0644\u0627 (\u0645\u0631\u0648\u0631\u06af\u0631 \u0641\u0627\u06cc\u0631\u0641\u0627\u06a9\u0633\u060c \u0641\u0648\u06a9\u0633 \u0648 \u062a\u0627\u0646\u062f\u0631\u0628\u0631\u062f) \u0634\u0646\u0627\u0633\u0627\u06cc\u06cc \u0634\u062f\u0647\u200c\u0627\u0646\u062f \u06a9\u0647 \u0637\u0628\u0642 \u0628\u0631\u0631\u0633\u06cc\u200c\u0647\u0627\u060c \u0645\u0648\u0627\u0631\u062f\u06cc \u0627\u0632 \u0633\u0648\u0621\u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0627\u0632 \u0622\u0646\u0647\u0627 \u062a\u0648\u0633\u0637 \u0645\u0647\u0627\u062c\u0645\u0627\u0646 \u0633\u0627\u06cc\u0628\u0631\u06cc \u0645\u0634\u0627\u0647\u062f\u0647 \u0634\u062f\u0647 \u0627\u0633\u062a.\n\n\ud83d\udd3a\u0633\u0637\u062d \u0627\u06cc\u0646 \u062f\u0648 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc \u0628\u0627 \u0634\u0646\u0627\u0633\u0647\u200c\u0647\u0627\u06cc CVE-2022-26485 \u0648 CVE-2022-26486 \u0628\u0633\u06cc\u0627\u0631 \u062d\u06cc\u0627\u062a\u06cc \u06af\u0632\u0627\u0631\u0634 \u0634\u062f\u0647\u060c \u0648 \u0647\u06a9\u0631 \u062f\u0631 \u0635\u0648\u0631\u062a \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0627\u0632 \u0622\u0646\u0647\u0627 \u0645\u06cc\u200c\u062a\u0648\u0627\u0646\u062f \u062a\u0642\u0631\u06cc\u0628\u0627 \u0647\u0631 \u0641\u0631\u0645\u0627\u0646\u06cc \u0631\u0627 \u0627\u0632 \u0631\u0627\u0647 \u062f\u0648\u0631 \u0627\u062c\u0631\u0627 \u0646\u0645\u0627\u06cc\u062f.\n\n\ud83d\udd17 \u0634\u0631\u062d \u0645\u062e\u062a\u0635\u0631 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc\u200c\u0647\u0627\n\n\ud83e\uddf2 \u0628\u0647 \u0628\u06cc\u0627\u0646\u06cc \u062f\u06cc\u06af\u0631\u060c \u0647\u06a9\u0631 \u0645\u06cc\u200c\u062a\u0648\u0627\u0646\u062f \u0628\u062f\u0627\u0641\u0632\u0627\u0631 \u0645\u0648\u0631\u062f \u0646\u0638\u0631\u0634 \u0631\u0627 \u0628\u0631 \u0633\u06cc\u0633\u062a\u0645 \u06cc\u0627 \u062f\u0633\u062a\u06af\u0627\u0647 \u0642\u0631\u0628\u0627\u0646\u06cc \u062f\u0627\u0646\u0644\u0648\u062f \u0648 \u0627\u062c\u0631\u0627 \u06a9\u0631\u062f\u0647 \u0648 \u0627\u06cc\u0646\u06af\u0648\u0646\u0647\u060c \u062f\u0633\u062a\u0631\u0633\u06cc \u06a9\u0627\u0645\u0644\u06cc \u0628\u0647 \u0622\u0646 \u067e\u06cc\u062f\u0627 \u06a9\u0646\u062f.\n\n\u2705 \u0646\u0633\u062e\u0647\u200c\u0647\u0627\u06cc \u0628\u0647\u200c\u0631\u0648\u0632\u0631\u0633\u0627\u0646\u06cc \u0634\u062f\u0647\n\n> Firefox 97.0.2\n> Firefox ESR 91.6.1\n> Firefox for Android 97.3\n> Focus 97.3\n> Thunderbird 91.6.2\n\n\ud83c\udf10 \u0631\u0648\u0634\u200c\u0647\u0627\u06cc \u0628\u0647\u200c\u0631\u0648\u0632\u0631\u0633\u0627\u0646\u06cc", "creation_timestamp": "2026-08-22T14:00:15.374630Z"}, {"uuid": "ad7eea85-9f3d-435d-8375-dc81d20a3706", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-26486", "type": "seen", "source": "https://bsky.app/profile/vulnsea.com/post/3mth4tgli672k", "content": "\ud83c\udf11 HADAL \u00b7 actively exploited critical\nCVE-2022-26486: An unexpected message in the WebGPU IPC framework could lead to a use-after-free and exploitable sandbox escape\nCVSS 9.6 \u00b7 EPSS 2.3% \u00b7 CISA KEV \u00b7 0day\nhttps://beta.vulnsea.com/cve/CVE-2022-26486\n\n#CVE #infosec #cybersecurity #threatintel", "creation_timestamp": "2026-08-19T16:14:31.862647Z"}, {"uuid": "94336ece-40cd-4315-9d3e-92d94c3936f1", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-26486", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/a2dbbec1-bf68-4e80-bc67-2b85678c541a", "content": "", "creation_timestamp": "2026-06-19T12:47:29.608403Z"}, {"uuid": "170a35e3-037c-4217-bbd7-4522013ede1d", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-26486", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/5d7830bb-cb2d-4765-8908-2c21ea513606", "content": "", "creation_timestamp": "2026-06-23T14:05:06.887346Z"}, {"uuid": "cea2c495-4794-4078-a3fc-349a5a091ea5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-26486", "type": "seen", "source": "https://t.me/pleyades_it/9805", "content": "\u2757\ufe0fLa agencia CISA de USA urge actualizar el navegador Firefox para corregir dos #vulnerabilidades cr\u00edticas (CVE-2022-26485 y CVE-2022-26486) de tipo #zeroday.\nhttps://bit.ly/3hTCC5L", "creation_timestamp": "2026-07-12T22:00:16.307193Z"}, {"uuid": "7dfc4549-7ba4-4cd7-ae5a-1bf159aec03d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-26486", "type": "seen", "source": "https://t.me/pleyades_it/9805", "content": "\u2757\ufe0fLa agencia CISA de USA urge actualizar el navegador Firefox para corregir dos #vulnerabilidades cr\u00edticas (CVE-2022-26485 y CVE-2022-26486) de tipo #zeroday.\nhttps://bit.ly/3hTCC5L", "creation_timestamp": "2026-07-13T00:00:40.153322Z"}, {"uuid": "f8053d71-0fb0-4dda-9350-629fb6e756c1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-26486", "type": "seen", "source": "https://t.me/pleyades_it/9805", "content": "\u2757\ufe0fLa agencia CISA de USA urge actualizar el navegador Firefox para corregir dos #vulnerabilidades cr\u00edticas (CVE-2022-26485 y CVE-2022-26486) de tipo #zeroday.\nhttps://bit.ly/3hTCC5L", "creation_timestamp": "2026-07-14T00:00:52.329701Z"}, {"uuid": "bcc95a33-05c6-42d2-9e42-33c55cc4d860", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-26486", "type": "exploited", "source": "https://t.me/bitbaanlab/704", "content": "\u2b55\ufe0f \u0647\u0634\u062f\u0627\u0631 \u0641\u0648\u0631\u06cc \u2b55\ufe0f\n\n*** \u0645\u0631\u0648\u0631\u06af\u0631 \u0641\u0627\u06cc\u0631\u0641\u0627\u06a9\u0633 \u062e\u0648\u062f \u0631\u0627 \u0647\u0645\u06cc\u0646 \u0627\u0644\u0627\u0646 \u0628\u0647\u200c\u0631\u0648\u0632\u0631\u0633\u0627\u0646\u06cc \u06a9\u0646\u06cc\u062f***\n\n\u26a0\ufe0f \u0627\u062e\u06cc\u0631\u0627 \u062f\u0648 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc \u0628\u0633\u06cc\u0627\u0631 \u062d\u0633\u0627\u0633 \u062f\u0631 \u0628\u0631\u062e\u06cc \u0645\u062d\u0635\u0648\u0644\u0627\u062a \u0645\u0648\u0632\u06cc\u0644\u0627 (\u0645\u0631\u0648\u0631\u06af\u0631 \u0641\u0627\u06cc\u0631\u0641\u0627\u06a9\u0633\u060c \u0641\u0648\u06a9\u0633 \u0648 \u062a\u0627\u0646\u062f\u0631\u0628\u0631\u062f) \u0634\u0646\u0627\u0633\u0627\u06cc\u06cc \u0634\u062f\u0647\u200c\u0627\u0646\u062f \u06a9\u0647 \u0637\u0628\u0642 \u0628\u0631\u0631\u0633\u06cc\u200c\u0647\u0627\u060c \u0645\u0648\u0627\u0631\u062f\u06cc \u0627\u0632 \u0633\u0648\u0621\u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0627\u0632 \u0622\u0646\u0647\u0627 \u062a\u0648\u0633\u0637 \u0645\u0647\u0627\u062c\u0645\u0627\u0646 \u0633\u0627\u06cc\u0628\u0631\u06cc \u0645\u0634\u0627\u0647\u062f\u0647 \u0634\u062f\u0647 \u0627\u0633\u062a.\n\n\ud83d\udd3a\u0633\u0637\u062d \u0627\u06cc\u0646 \u062f\u0648 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc \u0628\u0627 \u0634\u0646\u0627\u0633\u0647\u200c\u0647\u0627\u06cc CVE-2022-26485 \u0648 CVE-2022-26486 \u0628\u0633\u06cc\u0627\u0631 \u062d\u06cc\u0627\u062a\u06cc \u06af\u0632\u0627\u0631\u0634 \u0634\u062f\u0647\u060c \u0648 \u0647\u06a9\u0631 \u062f\u0631 \u0635\u0648\u0631\u062a \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0627\u0632 \u0622\u0646\u0647\u0627 \u0645\u06cc\u200c\u062a\u0648\u0627\u0646\u062f \u062a\u0642\u0631\u06cc\u0628\u0627 \u0647\u0631 \u0641\u0631\u0645\u0627\u0646\u06cc \u0631\u0627 \u0627\u0632 \u0631\u0627\u0647 \u062f\u0648\u0631 \u0627\u062c\u0631\u0627 \u0646\u0645\u0627\u06cc\u062f.\n\n\ud83d\udd17 \u0634\u0631\u062d \u0645\u062e\u062a\u0635\u0631 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc\u200c\u0647\u0627\n\n\ud83e\uddf2 \u0628\u0647 \u0628\u06cc\u0627\u0646\u06cc \u062f\u06cc\u06af\u0631\u060c \u0647\u06a9\u0631 \u0645\u06cc\u200c\u062a\u0648\u0627\u0646\u062f \u0628\u062f\u0627\u0641\u0632\u0627\u0631 \u0645\u0648\u0631\u062f \u0646\u0638\u0631\u0634 \u0631\u0627 \u0628\u0631 \u0633\u06cc\u0633\u062a\u0645 \u06cc\u0627 \u062f\u0633\u062a\u06af\u0627\u0647 \u0642\u0631\u0628\u0627\u0646\u06cc \u062f\u0627\u0646\u0644\u0648\u062f \u0648 \u0627\u062c\u0631\u0627 \u06a9\u0631\u062f\u0647 \u0648 \u0627\u06cc\u0646\u06af\u0648\u0646\u0647\u060c \u062f\u0633\u062a\u0631\u0633\u06cc \u06a9\u0627\u0645\u0644\u06cc \u0628\u0647 \u0622\u0646 \u067e\u06cc\u062f\u0627 \u06a9\u0646\u062f.\n\n\u2705 \u0646\u0633\u062e\u0647\u200c\u0647\u0627\u06cc \u0628\u0647\u200c\u0631\u0648\u0632\u0631\u0633\u0627\u0646\u06cc \u0634\u062f\u0647\n\n> Firefox 97.0.2\n> Firefox ESR 91.6.1\n> Firefox for Android 97.3\n> Focus 97.3\n> Thunderbird 91.6.2\n\n\ud83c\udf10 \u0631\u0648\u0634\u200c\u0647\u0627\u06cc \u0628\u0647\u200c\u0631\u0648\u0632\u0631\u0633\u0627\u0646\u06cc", "creation_timestamp": "2026-08-23T00:00:37.992899Z"}, {"uuid": "c1101c46-a9da-408f-bf34-120f32f4b5ee", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-26486", "type": "seen", "source": "https://t.me/cissp/5466", "content": "Imperva has reported that the website of one of its customers was recently the target of a ransom-driven DDoS attack that reached a peak of 2.5 million \ud83e\udd13requests per second (RPS).\nRead details: https://thehackernews.com/2022/03/imperva-thwarts-25-million-rps-ransom.html\n\nResearchers warn of a new high-risk vulnerability (CVE-2022-0492) affecting the Linux kernel's cgroups \ud83e\udd2ffeature that could potentially be abused to escape a container to execute arbitrary commands on the host.\nRead details: https://thehackernews.com/2022/03/new-linux-kernel-cgroups-vulnerability.html\n\nU.S. cybersecurity agency CISA has added a new batch of 95 actively exploited flaws to its \"Known Exploited Vulnerabilities Catalog.\"\ud83d\ude17\nRead: https://thehackernews.com/2022/03/cisa-adds-another-95-flaws-to-its.html\n\nMozilla has warned hundreds of millions of Firefox users about newly discovered 0-day bugs (CVE-2022-26485, CVE-2022-26486) that are being exploited in the wild.\ud83d\ude10\nhttps://thehackernews.com/2022/03/2-new-mozilla-firefox-0-day-bugs-under.html\nUpdate to Firefox 97.0.2, ESR 91.6.1, Android v97.3.0, Focus 97.3.0 & Thunderbird 91.6.2.\n\nUkrainian Computer Emergency Response Team (CERT-UA) warns of new phishing attacks against its citizens using compromised email accounts from Indian entities.\ud83e\udd78\nRead: https://thehackernews.com/2022/03/ukrainian-cert-warns-citizens-of.html\n\nNewly disclosed vulnerabilities in the operating system for TerraMaster NAS devices can be chained to achieve unauthorized RCE with highest privileges.\nhttps://thehackernews.com/2022/03/critical-bugs-in-terramaster-tos-could.html", "creation_timestamp": "2026-09-01T17:00:31.152983Z"}, {"uuid": "a4560480-62be-4354-bbf8-33cb49da132c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-26486", "type": "seen", "source": "https://t.me/hacking_Attack/48396", "content": "Black Hat Ethical Hacking\nNews-Draft-Patreon image removed, Patreon link instead\n\nNews-Draft-Patreon image removed, Patreon link insteadPost Views: 7 Advanced Enumeration techniques with NMAP, Zenmap and Hydra https://www.blackhatethicalhacking.com/wp-content/uploads/2022/04/Digital-Patreon-Logo_FieryCoral-150x150.png Subscribe to Patreon to\u00a0watch this episode.\nReading Time: 2 Minutes\n\u200bMozilla has released Firefox 97.0.2, Firefox ESR 91.6.1, Firefox for Android 97.3.0, and Focus 97.3.0 to fix two critical zero-day vulnerabilities actively exploited in attacks.\nBoth zero-day vulnerabilities are \u201cUse-after-free\u201d bugs, which is when a program tries to use memory that has been previously cleared. When threat actors exploit this type of bug, it can cause the program to crash while at the same time allowing commands to be executed on the device without permission.\n\nThese bugs are critical because they could allow a remote attacker to execute almost any command, including the downloading of malware to provide further access to the device.\n\nThe zero-day vulnerabilities fixed by Mozilla are:\n\n* CVE-2022-26485: Use-after-free in XSLT parameter processing \u2013\u00a0Removing an XSLT parameter during processing could have lead to an exploitable use-after-free. We have had reports of attacks in the wild abusing this flaw.\n* CVE-2022-26486: Use-after-free in WebGPU IPC Framework \u2013 An unexpected message in the WebGPU IPC framework could lead to a use-after-free and exploitable sandbox escape. We have had reports of attacks in the wild abusing this flaw.\nSee Also: Complete Offensive Security and Ethical Hacking Course\nhttps://www.blackhatethicalhacking.com/wp-content/uploads/2022/03/Solutions-1.png \nAs Mozilla\u2019s security advisory explains, the Firefox developers are aware of \u201creports of attacks in the wild\u201d actively exploiting these vulnerabilities.\n\nWhile Mozilla has not shared how threat actors use these zero-day vulnerabilities in attacks, it was likely done by redirecting Firefox users to maliciously crafted web pages.\n\nThese vulnerabilities were discovered and disclosed to Mozilla by Chinese cybersecurity company Qihoo 360 ATA.\n\nDue to the critical nature of these bugs, and they are being actively exploited, it is strongly recommended that all Firefox users update their browsers immediately.\nSee Also: Kali Linux 2022.1 Release with Visual Updates, New Tools, Legacy SSH You can also download the latest version of Mozilla Firefox for Windows, macOS, and Linux from the following links:\n\n* Firefox 97.0.2 for Windows 64-bit\n* Firefox 97.0.2 for Windows 32-bit\n* Firefox 97.0.2 for macOS\n* Firefox 97.0.2 for Linux 64-bit\n* Firefox 97.0.2 for Linux 32-bit\n\nUsers can manually check for new updates by going to the Firefox menu\u00a0> Help\u00a0> About Firefox. Firefox will then automatically check for and install the latest update and prompt you to restart your browser. See Also: Offensive Security Tool: Scapy Are u a security researcher? Or a company that writes articles or write ups about Cyber Security, Offensive Security (related to information security in general) that match with our specific audience and is worth sharing?\n\nIf you want to express your idea in an article contact us here for a quote: info@blackhatethicalhacking.com\nSee Also: Hacking stories: MafiaBoy, the hacker who took down the Internet\nSource: bleepingcomputer.com Source Linkhttps://www.blackhatethicalhacking.com/wp-content/uploads/2022/03/Merch-1024x1024.png Recent News* https://www.blackhatethicalhacking.com/wp-content/uploads/2022/04/apple-iphone-hacking-90x90.jpg Apple emergency update fixes zero-days used to hack iPhones, Macs5 hours ago\n* https://www.blackhatethicalhacking.com/wp-content/uploads/2022/03/Google-Campus-90x90.jpg Google Chrome Bug Actively Exploited as Zero-Day1 day ago\n* https://www.blackhatet[...]\n\n___________________________ \n@hacking_Attack\n@Hacking_Video", "creation_timestamp": "2026-09-01T20:01:48.226860Z"}, {"uuid": "43912ab2-f90e-4027-8dda-96029b369217", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-26486", "type": "seen", "source": "https://t.me/hacking_Attack/48396", "content": "Black Hat Ethical Hacking\nNews-Draft-Patreon image removed, Patreon link instead\n\nNews-Draft-Patreon image removed, Patreon link insteadPost Views: 7 Advanced Enumeration techniques with NMAP, Zenmap and Hydra https://www.blackhatethicalhacking.com/wp-content/uploads/2022/04/Digital-Patreon-Logo_FieryCoral-150x150.png Subscribe to Patreon to\u00a0watch this episode.\nReading Time: 2 Minutes\n\u200bMozilla has released Firefox 97.0.2, Firefox ESR 91.6.1, Firefox for Android 97.3.0, and Focus 97.3.0 to fix two critical zero-day vulnerabilities actively exploited in attacks.\nBoth zero-day vulnerabilities are \u201cUse-after-free\u201d bugs, which is when a program tries to use memory that has been previously cleared. When threat actors exploit this type of bug, it can cause the program to crash while at the same time allowing commands to be executed on the device without permission.\n\nThese bugs are critical because they could allow a remote attacker to execute almost any command, including the downloading of malware to provide further access to the device.\n\nThe zero-day vulnerabilities fixed by Mozilla are:\n\n* CVE-2022-26485: Use-after-free in XSLT parameter processing \u2013\u00a0Removing an XSLT parameter during processing could have lead to an exploitable use-after-free. We have had reports of attacks in the wild abusing this flaw.\n* CVE-2022-26486: Use-after-free in WebGPU IPC Framework \u2013 An unexpected message in the WebGPU IPC framework could lead to a use-after-free and exploitable sandbox escape. We have had reports of attacks in the wild abusing this flaw.\nSee Also: Complete Offensive Security and Ethical Hacking Course\nhttps://www.blackhatethicalhacking.com/wp-content/uploads/2022/03/Solutions-1.png \nAs Mozilla\u2019s security advisory explains, the Firefox developers are aware of \u201creports of attacks in the wild\u201d actively exploiting these vulnerabilities.\n\nWhile Mozilla has not shared how threat actors use these zero-day vulnerabilities in attacks, it was likely done by redirecting Firefox users to maliciously crafted web pages.\n\nThese vulnerabilities were discovered and disclosed to Mozilla by Chinese cybersecurity company Qihoo 360 ATA.\n\nDue to the critical nature of these bugs, and they are being actively exploited, it is strongly recommended that all Firefox users update their browsers immediately.\nSee Also: Kali Linux 2022.1 Release with Visual Updates, New Tools, Legacy SSH You can also download the latest version of Mozilla Firefox for Windows, macOS, and Linux from the following links:\n\n* Firefox 97.0.2 for Windows 64-bit\n* Firefox 97.0.2 for Windows 32-bit\n* Firefox 97.0.2 for macOS\n* Firefox 97.0.2 for Linux 64-bit\n* Firefox 97.0.2 for Linux 32-bit\n\nUsers can manually check for new updates by going to the Firefox menu\u00a0> Help\u00a0> About Firefox. Firefox will then automatically check for and install the latest update and prompt you to restart your browser. See Also: Offensive Security Tool: Scapy Are u a security researcher? Or a company that writes articles or write ups about Cyber Security, Offensive Security (related to information security in general) that match with our specific audience and is worth sharing?\n\nIf you want to express your idea in an article contact us here for a quote: info@blackhatethicalhacking.com\nSee Also: Hacking stories: MafiaBoy, the hacker who took down the Internet\nSource: bleepingcomputer.com Source Linkhttps://www.blackhatethicalhacking.com/wp-content/uploads/2022/03/Merch-1024x1024.png Recent News* https://www.blackhatethicalhacking.com/wp-content/uploads/2022/04/apple-iphone-hacking-90x90.jpg Apple emergency update fixes zero-days used to hack iPhones, Macs5 hours ago\n* https://www.blackhatethicalhacking.com/wp-content/uploads/2022/03/Google-Campus-90x90.jpg Google Chrome Bug Actively Exploited as Zero-Day1 day ago\n* https://www.blackhatet[...]\n\n___________________________ \n@hacking_Attack\n@Hacking_Video", "creation_timestamp": "2026-09-02T01:02:01.399443Z"}, {"uuid": "8b866eca-48a1-4539-9270-56868f02dbcd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-26486", "type": "seen", "source": "https://t.me/cissp/5466", "content": "Imperva has reported that the website of one of its customers was recently the target of a ransom-driven DDoS attack that reached a peak of 2.5 million \ud83e\udd13requests per second (RPS).\nRead details: https://thehackernews.com/2022/03/imperva-thwarts-25-million-rps-ransom.html\n\nResearchers warn of a new high-risk vulnerability (CVE-2022-0492) affecting the Linux kernel's cgroups \ud83e\udd2ffeature that could potentially be abused to escape a container to execute arbitrary commands on the host.\nRead details: https://thehackernews.com/2022/03/new-linux-kernel-cgroups-vulnerability.html\n\nU.S. cybersecurity agency CISA has added a new batch of 95 actively exploited flaws to its \"Known Exploited Vulnerabilities Catalog.\"\ud83d\ude17\nRead: https://thehackernews.com/2022/03/cisa-adds-another-95-flaws-to-its.html\n\nMozilla has warned hundreds of millions of Firefox users about newly discovered 0-day bugs (CVE-2022-26485, CVE-2022-26486) that are being exploited in the wild.\ud83d\ude10\nhttps://thehackernews.com/2022/03/2-new-mozilla-firefox-0-day-bugs-under.html\nUpdate to Firefox 97.0.2, ESR 91.6.1, Android v97.3.0, Focus 97.3.0 & Thunderbird 91.6.2.\n\nUkrainian Computer Emergency Response Team (CERT-UA) warns of new phishing attacks against its citizens using compromised email accounts from Indian entities.\ud83e\udd78\nRead: https://thehackernews.com/2022/03/ukrainian-cert-warns-citizens-of.html\n\nNewly disclosed vulnerabilities in the operating system for TerraMaster NAS devices can be chained to achieve unauthorized RCE with highest privileges.\nhttps://thehackernews.com/2022/03/critical-bugs-in-terramaster-tos-could.html", "creation_timestamp": "2026-09-02T01:04:14.348372Z"}]}