Vulnerabilities > CVE-2022-45407 - Use After Free vulnerability in Mozilla Firefox

047910
CVSS 7.5 - HIGH
Attack vector
NETWORK
Attack complexity
LOW
Privileges required
NONE
Confidentiality impact
NONE
Integrity impact
NONE
Availability impact
HIGH
network
low complexity
mozilla
CWE-416
NVD
Published: 2022-12-22
Updated: 2023-01-04

Summary

If an attacker loaded a font using <code>FontFace()</code> on a background worker, a use-after-free could have occurred, leading to a potentially exploitable crash. This vulnerability affects Firefox < 107.

Vulnerable Configurations

Part Description Count
Application
Mozilla
879

Common Weakness Enumeration (CWE)

References