Vulnerability Details CVE-2022-38474
A website that had permission to access the microphone could record audio without the audio notification being shown. This bug does not allow the attacker to bypass the permission prompt - it only affects the notification shown once permission has been granted.<br />*This bug only affects Firefox for Android. Other operating systems are unaffected.*. This vulnerability affects Firefox < 104.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.0
EPSS Ranking 6.8%
CVSS Severity
CVSS v3 Score 4.3
References
Products affected by CVE-2022-38474
-
cpe:2.3:a:mozilla:firefox:80.0
-
cpe:2.3:a:mozilla:firefox:83.0
-
cpe:2.3:a:mozilla:firefox:84.0
-
cpe:2.3:a:mozilla:firefox:84.1.3
-
cpe:2.3:a:mozilla:firefox:92.0
-
cpe:2.3:a:mozilla:firefox:97.3.0