Vulnerabilities > CVE-2022-45407

047910
CVSS 7.5 - HIGH
Attack vector
NETWORK
Attack complexity
LOW
Privileges required
NONE
Confidentiality impact
NONE
Integrity impact
NONE
Availability impact
HIGH
network
low complexity
CWE-416
NVD
Published: 2022-12-22
Updated: 2023-01-04

Summary

If an attacker loaded a font using <code>FontFace()</code> on a background worker, a use-after-free could have occurred, leading to a potentially exploitable crash. This vulnerability affects Firefox < 107.

Common Weakness Enumeration (CWE)

References