CVE-2022-26485

Firefox use-after-free flaw in XSLT processing allows remote code execution.

A use-after-free vulnerability in Firefox's XSLT parameter processing enables arbitrary code execution, posing a severe risk to systems relying on the browser for web-based operations. DIB organizations must ensure their browsers are patched immediately, as this flaw was actively exploited in the wild and could lead to data breaches or ransomware deployment if unpatched.

Shame score — A critical RCE flaw in a widely used browser was actively exploited in the wild, demonstrating severe negligence in patch management and leaving organizations exposed to remote compromise.