CVE-2022-38474

CVE-2022-38474 is a medium-severity vulnerability affecting Firefox for Android versions prior to 104. It allows a website with microphone access permission to record audio without displaying the usual notification, effectively enabling covert audio recording. The attack requires user interaction to grant initial microphone permission, but thereafter, the notification mechanism is bypassed. While there is no evidence of active exploitation or public exploit code, the vulnerability has garnered some community discussion and media coverage, indicating awareness within the security community.