Q: What is CVE-2022-45405 — CVE-2022-45405?

Freeing arbitrary nsIInputStream 's on a different thread than creation could have led to a use-after-free and potentially exploitable crash. This vulnerability affects Firefox ESR < 102.5, Thunderbird < 102.5, and Firefox < 107.

Q: What is the authoritative source for CVE-2022-45405?

CVE-2022-45405 (CVE-2022-45405) is catalogued in NVD + CISA KEV + FIRST EPSS and curated for EU compliance use cases by SQUR.

Question 1

What is CVE-2022-45405 — CVE-2022-45405?

Accepted Answer

Freeing arbitrary nsIInputStream's on a different thread than creation could have led to a use-after-free and potentially exploitable crash. This vulnerability affects Firefox ESR < 102.5, Thunderbird < 102.5, and Firefox < 107.

Question 2

What is the authoritative source for CVE-2022-45405?

Accepted Answer

CVE-2022-45405 (CVE-2022-45405) is catalogued in NVD + CISA KEV + FIRST EPSS and curated for EU compliance use cases by SQUR.

CVSS	6.5 ()
Vector	CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
EPSS	0.64% probability of exploitation · percentile 47.1% · 2026-08-03T12:00:16Z
Last modified	2026-06-17

CVE-2022-45405CVE-2022-45405

Description

Scoring