cve/2022/CVE-2022-36314.md

### [CVE-2022-36314](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-36314)
![](https://img.shields.io/static/v1?label=Product&message=Firefox%20ESR&color=blue)
![](https://img.shields.io/static/v1?label=Product&message=Firefox&color=blue)
![](https://img.shields.io/static/v1?label=Product&message=Thunderbird&color=blue)
![](https://img.shields.io/static/v1?label=Version&message=%3C%20102.1%20&color=brighgreen)
![](https://img.shields.io/static/v1?label=Version&message=%3C%20103%20&color=brighgreen)
![](https://img.shields.io/static/v1?label=Vulnerability&message=Opening%20local%20%3Ccode%3E.lnk%3C%2Fcode%3E%20files%20could%20cause%20unexpected%20network%20loads&color=brighgreen)

### Description

When opening a Windows shortcut from the local filesystem, an attacker could supply a remote path that would lead to unexpected network requests from the operating system.<br>This bug only affects Firefox for Windows. Other operating systems are unaffected.*. This vulnerability affects Firefox ESR < 102.1, Firefox < 103, and Thunderbird < 102.1.

### POC

#### Reference
- https://www.mozilla.org/security/advisories/mfsa2022-28/

#### Github
No PoCs found on GitHub currently.