Lucene search
HistoryDec 22, 2022 - 8:15 p.m.
CVE-2022-45409
garbage collector
firefox
thunderbird
use-after-free
exploitable crash
8.8 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
0.002 Low
EPSS
Percentile
52.5%
The garbage collector could have been aborted in several states and zones and <code>GCRuntime::finishCollection</code> may not have been called, leading to a use-after-free and potentially exploitable crash. This vulnerability affects Firefox ESR < 102.5, Thunderbird < 102.5, and Firefox < 107.
Affected configurations
Node
mozillafirefoxRange<107.0
ORmozillafirefox_esrRange<102.5
ORmozillathunderbirdRange<102.5
Related
veracode
veracode
Denial Of Service (DoS)
2022-11-19 18:48:29
ubuntucve
ubuntucve
CVE-2022-45409
2022-11-16 00:00:00
redhatcve
redhatcve
CVE-2022-45409
2022-11-16 11:26:26
prion
prion
Code injection
2022-12-22 20:15:00
alpinelinux
alpinelinux
CVE-2022-45409
2022-12-22 20:15:42
cve
cve
CVE-2022-45409
2022-12-22 20:15:42
debiancve
debiancve
CVE-2022-45409
2022-12-22 20:15:42
cvelist
cvelist
CVE-2022-45409
2022-12-22 00:00:00
openvas
openvas
Mozilla Thunderbird Security Advisories (MFSA2022-47, MFSA2022-49) - Windows
2022-11-16 00:00:00
Mozilla Firefox ESR Security Advisories (MFSA2022-47, MFSA2022-49) - Windows
2022-11-16 00:00:00
Debian: Security Advisory (DSA-5284-1)
2022-11-19 00:00:00
ibm
ibm
oraclelinux
oraclelinux
firefox security update
2022-11-22 00:00:00
firefox security update
2022-11-24 00:00:00
thunderbird security update
2022-11-22 00:00:00
debian
debian
[SECURITY] [DSA 5282-1] firefox-esr security update
2022-11-16 19:36:41
[SECURITY] [DLA 3199-1] firefox-esr security update
2022-11-17 19:18:41
[SECURITY] [DLA 3196-1] thunderbird security update
2022-11-17 11:54:17
nessus
nessus
Oracle Linux 7 : thunderbird (ELSA-2022-8555)
2022-11-21 00:00:00
Debian DLA-3199-1 : firefox-esr - LTS security update
2022-11-18 00:00:00
Rocky Linux 8 : firefox (RLSA-2022:8580)
2023-01-30 00:00:00
altlinux
altlinux
Security fix for the ALT Linux 10 package firefox-esr version 102.5.0-alt1
2022-11-16 00:00:00
Security fix for the ALT Linux 10 package thunderbird version 102.5.0-alt1
2022-11-24 00:00:00
osv
osv
Important: thunderbird security update
2022-11-21 00:00:00
thunderbird - security update
2022-11-17 00:00:00
Important: firefox security update
2022-11-22 00:00:00
mageia
mageia
Updated thunderbird packages fix security vulnerability
2022-11-17 23:45:15
Updated firefox packages fix security vulnerability
2022-11-17 23:45:15
kaspersky
kaspersky
KLA20051 Multiple vulnerabilities in Mozilla Thunderbird
2022-11-15 00:00:00
KLA20050 Multiple vulnerabilities in Mozilla Firefox ESR
2022-11-15 00:00:00
KLA20049 Multiple vulnerabilities in Mozilla Firefox
2022-11-15 00:00:00
redhat
redhat
(RHSA-2022:8979) Important: firefox security update
2022-12-13 15:31:14
(RHSA-2022:8561) Important: thunderbird security update
2022-11-21 16:11:52
(RHSA-2022:8545) Important: thunderbird security update
2022-11-21 11:14:50
almalinux
almalinux
Important: thunderbird security update
2022-11-21 00:00:00
Important: thunderbird security update
2022-11-21 00:00:00
Important: firefox security update
2022-11-22 00:00:00
rocky
rocky
thunderbird security update
2022-11-21 11:16:30
firefox security update
2022-11-21 12:37:04
firefox security update
2023-01-30 05:25:59
slackware
slackware
[slackware-security] mozilla-thunderbird
2022-11-17 02:00:24
[slackware-security] mozilla-firefox
2022-11-17 02:00:08
gentoo
gentoo
Mozilla Thunderbird: Multiple Vulnerabilities
2022-11-22 00:00:00
Mozilla Firefox: Multiple Vulnerabilities
2022-11-22 00:00:00
mozilla
mozilla
Security Vulnerabilities fixed in Thunderbird 102.5 — Mozilla
2022-11-15 00:00:00
Security Vulnerabilities fixed in Firefox ESR 102.5 — Mozilla
2022-11-15 00:00:00
Security Vulnerabilities fixed in Firefox 107 — Mozilla
2022-11-15 00:00:00
centos
centos
firefox security update
2022-11-30 22:58:26
thunderbird security update
2022-11-30 22:59:37
ubuntu
ubuntu
Firefox vulnerabilities
2022-11-16 00:00:00
Thunderbird vulnerabilities
2023-02-06 00:00:00
photon
photon
Critical Photon OS Security Update - PHSA-2023-5.0-0035
2023-06-22 00:00:00
8.8 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
0.002 Low
EPSS
Percentile
52.5%
Related for NVD:CVE-2022-45409