Q: What is CVE-2022-45407 — CVE-2022-45407?

If an attacker loaded a font using FontFace() on a background worker, a use-after-free could have occurred, leading to a potentially exploitable crash. This vulnerability affects Firefox < 107.

Q: What is the authoritative source for CVE-2022-45407?

CVE-2022-45407 (CVE-2022-45407) is catalogued in NVD + CISA KEV + FIRST EPSS and curated for EU compliance use cases by SQUR.

Question 1

What is CVE-2022-45407 — CVE-2022-45407?

Accepted Answer

If an attacker loaded a font using FontFace() on a background worker, a use-after-free could have occurred, leading to a potentially exploitable crash. This vulnerability affects Firefox < 107.

Question 2

What is the authoritative source for CVE-2022-45407?

Accepted Answer

CVE-2022-45407 (CVE-2022-45407) is catalogued in NVD + CISA KEV + FIRST EPSS and curated for EU compliance use cases by SQUR.

CVSS	7.5 ()
Vector	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
EPSS	0.63% probability of exploitation · percentile 45.3% · 2026-06-19T12:03:05Z
Last modified	2026-06-17

CVE-2022-45407CVE-2022-45407

Description

Scoring