CVE-2022-22753

CVE-2022-22753 is a Time-of-Check Time-of-Use (TOCTOU) vulnerability in the Maintenance (Updater) Service of Mozilla Firefox, Thunderbird, and Firefox ESR on Windows, affecting versions prior to 97, 91.6, and 91.6 respectively. This flaw could allow a low-privileged user to gain write access to an arbitrary directory, potentially leading to SYSTEM-level privilege escalation. With a CVSS score of 7.1 (High), exploitation requires user interaction and high attack complexity, but could result in full confidentiality, integrity, and availability impact. There is no evidence of active exploitation, public exploit code, or significant community discussion, and it is not listed in CISA's KEV catalog.