VulnerableCode Vulnerability Details

Search for vulnerabilities

Vulnerability details: VCID-8z87-d53p-aaag

Essentials
Severities (97)
References (46)
Severity details (14)
Exploits (0)
EPSS
History (0)

Vulnerability ID	VCID-8z87-d53p-aaag
Aliases	CVE-2022-45409
Summary	The garbage collector could have been aborted in several states and zones and <code>GCRuntime::finishCollection</code> may not have been called, leading to a use-after-free and potentially exploitable crash. This vulnerability affects Firefox ESR < 102.5, Thunderbird < 102.5, and Firefox < 107.
Status	Published
Exploitability	0.5
Weighted Severity	8.0
Risk	4.0
Affected and Fixed Packages	Package Details

Weaknesses (1)

CWE-416

Use After Free

System	Score	Found at
cvssv3	8.8	https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2022-45409.json
epss	0.00128	https://api.first.org/data/v1/epss?cve=CVE-2022-45409
epss	0.00128	https://api.first.org/data/v1/epss?cve=CVE-2022-45409
epss	0.00128	https://api.first.org/data/v1/epss?cve=CVE-2022-45409
epss	0.00128	https://api.first.org/data/v1/epss?cve=CVE-2022-45409
epss	0.00128	https://api.first.org/data/v1/epss?cve=CVE-2022-45409
epss	0.00128	https://api.first.org/data/v1/epss?cve=CVE-2022-45409
epss	0.00128	https://api.first.org/data/v1/epss?cve=CVE-2022-45409
epss	0.00128	https://api.first.org/data/v1/epss?cve=CVE-2022-45409
epss	0.00128	https://api.first.org/data/v1/epss?cve=CVE-2022-45409
epss	0.00128	https://api.first.org/data/v1/epss?cve=CVE-2022-45409
epss	0.00128	https://api.first.org/data/v1/epss?cve=CVE-2022-45409
epss	0.00128	https://api.first.org/data/v1/epss?cve=CVE-2022-45409
epss	0.00128	https://api.first.org/data/v1/epss?cve=CVE-2022-45409
epss	0.00128	https://api.first.org/data/v1/epss?cve=CVE-2022-45409
epss	0.00128	https://api.first.org/data/v1/epss?cve=CVE-2022-45409
epss	0.00128	https://api.first.org/data/v1/epss?cve=CVE-2022-45409
epss	0.00128	https://api.first.org/data/v1/epss?cve=CVE-2022-45409
epss	0.00128	https://api.first.org/data/v1/epss?cve=CVE-2022-45409
epss	0.00128	https://api.first.org/data/v1/epss?cve=CVE-2022-45409
epss	0.00128	https://api.first.org/data/v1/epss?cve=CVE-2022-45409
epss	0.00128	https://api.first.org/data/v1/epss?cve=CVE-2022-45409
epss	0.00128	https://api.first.org/data/v1/epss?cve=CVE-2022-45409
epss	0.00128	https://api.first.org/data/v1/epss?cve=CVE-2022-45409
epss	0.00128	https://api.first.org/data/v1/epss?cve=CVE-2022-45409
epss	0.00128	https://api.first.org/data/v1/epss?cve=CVE-2022-45409
epss	0.00128	https://api.first.org/data/v1/epss?cve=CVE-2022-45409
epss	0.00128	https://api.first.org/data/v1/epss?cve=CVE-2022-45409
epss	0.00128	https://api.first.org/data/v1/epss?cve=CVE-2022-45409
epss	0.00128	https://api.first.org/data/v1/epss?cve=CVE-2022-45409
epss	0.00128	https://api.first.org/data/v1/epss?cve=CVE-2022-45409
epss	0.00128	https://api.first.org/data/v1/epss?cve=CVE-2022-45409
epss	0.00128	https://api.first.org/data/v1/epss?cve=CVE-2022-45409
epss	0.00128	https://api.first.org/data/v1/epss?cve=CVE-2022-45409
epss	0.00128	https://api.first.org/data/v1/epss?cve=CVE-2022-45409
epss	0.00128	https://api.first.org/data/v1/epss?cve=CVE-2022-45409
epss	0.00128	https://api.first.org/data/v1/epss?cve=CVE-2022-45409
epss	0.00128	https://api.first.org/data/v1/epss?cve=CVE-2022-45409
epss	0.00128	https://api.first.org/data/v1/epss?cve=CVE-2022-45409
epss	0.00128	https://api.first.org/data/v1/epss?cve=CVE-2022-45409
epss	0.00128	https://api.first.org/data/v1/epss?cve=CVE-2022-45409
epss	0.00128	https://api.first.org/data/v1/epss?cve=CVE-2022-45409
epss	0.00128	https://api.first.org/data/v1/epss?cve=CVE-2022-45409
epss	0.00128	https://api.first.org/data/v1/epss?cve=CVE-2022-45409
epss	0.00128	https://api.first.org/data/v1/epss?cve=CVE-2022-45409
epss	0.00128	https://api.first.org/data/v1/epss?cve=CVE-2022-45409
epss	0.00128	https://api.first.org/data/v1/epss?cve=CVE-2022-45409
epss	0.00128	https://api.first.org/data/v1/epss?cve=CVE-2022-45409
epss	0.00128	https://api.first.org/data/v1/epss?cve=CVE-2022-45409
epss	0.00128	https://api.first.org/data/v1/epss?cve=CVE-2022-45409
epss	0.00128	https://api.first.org/data/v1/epss?cve=CVE-2022-45409
epss	0.00128	https://api.first.org/data/v1/epss?cve=CVE-2022-45409
epss	0.00128	https://api.first.org/data/v1/epss?cve=CVE-2022-45409
epss	0.00128	https://api.first.org/data/v1/epss?cve=CVE-2022-45409
epss	0.00128	https://api.first.org/data/v1/epss?cve=CVE-2022-45409
epss	0.00128	https://api.first.org/data/v1/epss?cve=CVE-2022-45409
epss	0.00128	https://api.first.org/data/v1/epss?cve=CVE-2022-45409
epss	0.00128	https://api.first.org/data/v1/epss?cve=CVE-2022-45409
epss	0.00128	https://api.first.org/data/v1/epss?cve=CVE-2022-45409
epss	0.00128	https://api.first.org/data/v1/epss?cve=CVE-2022-45409
epss	0.00128	https://api.first.org/data/v1/epss?cve=CVE-2022-45409
epss	0.00128	https://api.first.org/data/v1/epss?cve=CVE-2022-45409
epss	0.00128	https://api.first.org/data/v1/epss?cve=CVE-2022-45409
epss	0.00128	https://api.first.org/data/v1/epss?cve=CVE-2022-45409
epss	0.00128	https://api.first.org/data/v1/epss?cve=CVE-2022-45409
epss	0.00128	https://api.first.org/data/v1/epss?cve=CVE-2022-45409
epss	0.00128	https://api.first.org/data/v1/epss?cve=CVE-2022-45409
epss	0.00128	https://api.first.org/data/v1/epss?cve=CVE-2022-45409
epss	0.00210	https://api.first.org/data/v1/epss?cve=CVE-2022-45409
epss	0.00210	https://api.first.org/data/v1/epss?cve=CVE-2022-45409
epss	0.00210	https://api.first.org/data/v1/epss?cve=CVE-2022-45409
epss	0.00210	https://api.first.org/data/v1/epss?cve=CVE-2022-45409
epss	0.00210	https://api.first.org/data/v1/epss?cve=CVE-2022-45409
epss	0.00210	https://api.first.org/data/v1/epss?cve=CVE-2022-45409
epss	0.00210	https://api.first.org/data/v1/epss?cve=CVE-2022-45409
epss	0.00210	https://api.first.org/data/v1/epss?cve=CVE-2022-45409
epss	0.00210	https://api.first.org/data/v1/epss?cve=CVE-2022-45409
epss	0.00210	https://api.first.org/data/v1/epss?cve=CVE-2022-45409
epss	0.00210	https://api.first.org/data/v1/epss?cve=CVE-2022-45409
epss	0.00210	https://api.first.org/data/v1/epss?cve=CVE-2022-45409
epss	0.00210	https://api.first.org/data/v1/epss?cve=CVE-2022-45409
epss	0.00210	https://api.first.org/data/v1/epss?cve=CVE-2022-45409
epss	0.00210	https://api.first.org/data/v1/epss?cve=CVE-2022-45409
epss	0.00589	https://api.first.org/data/v1/epss?cve=CVE-2022-45409
cvssv3.1	8.8	https://bugzilla.mozilla.org/show_bug.cgi?id=1796901
ssvc	Track	https://bugzilla.mozilla.org/show_bug.cgi?id=1796901
cvssv3	8.8	https://nvd.nist.gov/vuln/detail/CVE-2022-45409
cvssv3.1	8.8	https://nvd.nist.gov/vuln/detail/CVE-2022-45409
generic_textual	high	https://www.mozilla.org/en-US/security/advisories/mfsa2022-47
generic_textual	high	https://www.mozilla.org/en-US/security/advisories/mfsa2022-48
generic_textual	high	https://www.mozilla.org/en-US/security/advisories/mfsa2022-49
cvssv3.1	8.8	https://www.mozilla.org/security/advisories/mfsa2022-47/
ssvc	Track	https://www.mozilla.org/security/advisories/mfsa2022-47/
cvssv3.1	8.8	https://www.mozilla.org/security/advisories/mfsa2022-48/
ssvc	Track	https://www.mozilla.org/security/advisories/mfsa2022-48/
cvssv3.1	8.8	https://www.mozilla.org/security/advisories/mfsa2022-49/
ssvc	Track	https://www.mozilla.org/security/advisories/mfsa2022-49/

Reference id	Reference type	URL
		https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2022-45409.json
		https://api.first.org/data/v1/epss?cve=CVE-2022-45409
		https://bugzilla.mozilla.org/show_bug.cgi?id=1796901
		https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-45403
		https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-45404
		https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-45405
		https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-45406
		https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-45408
		https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-45409
		https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-45410
		https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-45411
		https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-45412
		https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-45416
		https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-45418
		https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-45420
		https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-45421
		https://www.mozilla.org/security/advisories/mfsa2022-47/
		https://www.mozilla.org/security/advisories/mfsa2022-48/
		https://www.mozilla.org/security/advisories/mfsa2022-49/
2143202		https://bugzilla.redhat.com/show_bug.cgi?id=2143202
cpe:2.3:a:mozilla:firefox::::::::		https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:mozilla:firefox::::::::
cpe:2.3:a:mozilla:firefox_esr::::::::		https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:mozilla:firefox_esr::::::::
cpe:2.3:a:mozilla:thunderbird::::::::		https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:mozilla:thunderbird::::::::
CVE-2022-45409		https://nvd.nist.gov/vuln/detail/CVE-2022-45409
GLSA-202211-05		https://security.gentoo.org/glsa/202211-05
mfsa2022-47		https://www.mozilla.org/en-US/security/advisories/mfsa2022-47
mfsa2022-48		https://www.mozilla.org/en-US/security/advisories/mfsa2022-48
mfsa2022-49		https://www.mozilla.org/en-US/security/advisories/mfsa2022-49
RHSA-2022:8543		https://access.redhat.com/errata/RHSA-2022:8543
RHSA-2022:8544		https://access.redhat.com/errata/RHSA-2022:8544
RHSA-2022:8545		https://access.redhat.com/errata/RHSA-2022:8545
RHSA-2022:8547		https://access.redhat.com/errata/RHSA-2022:8547
RHSA-2022:8548		https://access.redhat.com/errata/RHSA-2022:8548
RHSA-2022:8549		https://access.redhat.com/errata/RHSA-2022:8549
RHSA-2022:8550		https://access.redhat.com/errata/RHSA-2022:8550
RHSA-2022:8552		https://access.redhat.com/errata/RHSA-2022:8552
RHSA-2022:8553		https://access.redhat.com/errata/RHSA-2022:8553
RHSA-2022:8554		https://access.redhat.com/errata/RHSA-2022:8554
RHSA-2022:8555		https://access.redhat.com/errata/RHSA-2022:8555
RHSA-2022:8556		https://access.redhat.com/errata/RHSA-2022:8556
RHSA-2022:8561		https://access.redhat.com/errata/RHSA-2022:8561
RHSA-2022:8580		https://access.redhat.com/errata/RHSA-2022:8580
RHSA-2022:8979		https://access.redhat.com/errata/RHSA-2022:8979
RHSA-2022:8980		https://access.redhat.com/errata/RHSA-2022:8980
USN-5726-1		https://usn.ubuntu.com/5726-1/
USN-5824-1		https://usn.ubuntu.com/5824-1/

No exploits are available.

Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H Found at https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2022-45409.json

Attack Vector (AV)	Attack Complexity (AC)	Privileges Required (PR)	User Interaction (UI)	Scope (S)	Confidentiality Impact (C)	Integrity Impact (I)	Availability Impact (A)
network adjacent_network local physical	low high	none low high	none required	unchanged changed	high low none	high low none	high low none

Attack Vector (AV)

Attack Complexity (AC)

Privileges Required (PR)

User Interaction (UI)

Scope (S)

Confidentiality Impact (C)

Integrity Impact (I)

Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none

Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H Found at https://bugzilla.mozilla.org/show_bug.cgi?id=1796901

Attack Vector (AV)	Attack Complexity (AC)	Privileges Required (PR)	User Interaction (UI)	Scope (S)	Confidentiality Impact (C)	Integrity Impact (I)	Availability Impact (A)
network adjacent_network local physical	low high	none low high	none required	unchanged changed	high low none	high low none	high low none

Attack Vector (AV)

Attack Complexity (AC)

Privileges Required (PR)

User Interaction (UI)

Scope (S)

Confidentiality Impact (C)

Integrity Impact (I)

Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none

Vector: SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2025-04-15T14:38:34Z/ Found at https://bugzilla.mozilla.org/show_bug.cgi?id=1796901

Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H Found at https://nvd.nist.gov/vuln/detail/CVE-2022-45409

Attack Vector (AV)	Attack Complexity (AC)	Privileges Required (PR)	User Interaction (UI)	Scope (S)	Confidentiality Impact (C)	Integrity Impact (I)	Availability Impact (A)
network adjacent_network local physical	low high	none low high	none required	unchanged changed	high low none	high low none	high low none

Attack Vector (AV)

Attack Complexity (AC)

Privileges Required (PR)

User Interaction (UI)

Scope (S)

Confidentiality Impact (C)

Integrity Impact (I)

Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none

Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H Found at https://nvd.nist.gov/vuln/detail/CVE-2022-45409

Attack Vector (AV)	Attack Complexity (AC)	Privileges Required (PR)	User Interaction (UI)	Scope (S)	Confidentiality Impact (C)	Integrity Impact (I)	Availability Impact (A)
network adjacent_network local physical	low high	none low high	none required	unchanged changed	high low none	high low none	high low none

Attack Vector (AV)

Attack Complexity (AC)

Privileges Required (PR)

User Interaction (UI)

Scope (S)

Confidentiality Impact (C)

Integrity Impact (I)

Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none

Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H Found at https://www.mozilla.org/security/advisories/mfsa2022-47/

Attack Vector (AV)	Attack Complexity (AC)	Privileges Required (PR)	User Interaction (UI)	Scope (S)	Confidentiality Impact (C)	Integrity Impact (I)	Availability Impact (A)
network adjacent_network local physical	low high	none low high	none required	unchanged changed	high low none	high low none	high low none

Attack Vector (AV)

Attack Complexity (AC)

Privileges Required (PR)

User Interaction (UI)

Scope (S)

Confidentiality Impact (C)

Integrity Impact (I)

Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none

Vector: SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2025-04-15T14:38:34Z/ Found at https://www.mozilla.org/security/advisories/mfsa2022-47/

Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H Found at https://www.mozilla.org/security/advisories/mfsa2022-48/

Attack Vector (AV)	Attack Complexity (AC)	Privileges Required (PR)	User Interaction (UI)	Scope (S)	Confidentiality Impact (C)	Integrity Impact (I)	Availability Impact (A)
network adjacent_network local physical	low high	none low high	none required	unchanged changed	high low none	high low none	high low none

Attack Vector (AV)

Attack Complexity (AC)

Privileges Required (PR)

User Interaction (UI)

Scope (S)

Confidentiality Impact (C)

Integrity Impact (I)

Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none

Vector: SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2025-04-15T14:38:34Z/ Found at https://www.mozilla.org/security/advisories/mfsa2022-48/

Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H Found at https://www.mozilla.org/security/advisories/mfsa2022-49/

Attack Vector (AV)	Attack Complexity (AC)	Privileges Required (PR)	User Interaction (UI)	Scope (S)	Confidentiality Impact (C)	Integrity Impact (I)	Availability Impact (A)
network adjacent_network local physical	low high	none low high	none required	unchanged changed	high low none	high low none	high low none

Attack Vector (AV)

Attack Complexity (AC)

Privileges Required (PR)

User Interaction (UI)

Scope (S)

Confidentiality Impact (C)

Integrity Impact (I)

Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none

Vector: SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2025-04-15T14:38:34Z/ Found at https://www.mozilla.org/security/advisories/mfsa2022-49/

Exploit Prediction Scoring System (EPSS)

Percentile	0.29042
EPSS Score	0.00128
Published At	March 28, 2025, 12:55 p.m.

Date	Actor	Action	Source	VulnerableCode Version
There are no relevant records.