Corrective releases of Firefox 100.0.2, Firefox ESR 91.9.1, and Thunderbird 91.9.1 have been published, addressing two vulnerabilities rated as critical. A working exploit was demonstrated at the ongoing Pwn2Own 2022 competition, allowing the bypassing of sandbox isolation when opening a specially crafted page and executing code on the system. The exploit author received a $100,000 prize.
The first vulnerability (CVE-2022-1802) is present in the implementation of the await operator, enabling corruption of methods in the Array object by altering its prototype property ("prototype pollution"). The second vulnerability (CVE-2022-1529) allows for modification of the prototype property when handling untrusted data during JavaScript object indexing. These vulnerabilities can execute JavaScript code in a privileged parent process.
Source: opennet.ru
