CVE-2022-23203A buffer overflow vulnerability that could lead to arbitrary code execution in Photoshop 2021 and Photoshop 2022 for Windows and macOS.Of these 17 vulnerabilities, five are rated as critical. AdobeĪdobereleased updates to fix 17 CVEs affecting Premiere Rush, Illustrator, Photoshop, After Effects, and Creative Cloud Desktop. These vulnerabilities were found by Mozilla developers. Those two are both memory safety bugs that with enough effort could have been exploited to run arbitrary code. Two other vulnerabilities were classified as high. CVE-2022-22754If a user installs an extension of a particular type, the extension could have auto-updated itself and, while doing so, bypass the prompt which grants the new version the new requested permissions.This bug only affects Firefox on Windows. This could have been used to escalate to SYSTEM access. CVE-2022-22753A Time-of-Check Time-of-Use bug existed in the Maintenance (Updater) Service that could be abused to grant users write access to an arbitrary directory.The two most important ones are both permissions issues: Mozillafixed a dozen security vulnerabilities in its Firefox browser. Let’s have a look at the ones that jumped out at us. Its goal is to make it easier to share data across separate vulnerability capabilities (tools, databases, and services). Publicly disclosed computer security flaws are listed in the Common Vulnerabilities and Exposures (CVE) database. Firefox and Adobe however have fixed a few issues that could be qualified as critical. While Microsoft addresses 70 vulnerabilities in its February 2022 Patch Tuesday release, none of them are ranked as critical. The most critical updates for this “Patch Tuesday” come from Firefox and Adobe.

Firefox check for updates