CVE-2022-45417

4.3 mediumEPSS 0.4%

Medium (4.3) in mozilla firefox. EPSS 0.4% chance of exploitation in the next 30 days.

Service Workers did not detect Private Browsing Mode correctly in all cases, which could have led to Service Workers being written to disk for websites visited in Private Browsing Mode. This would not have persisted them in a state where they would run again, but it would have leaked Private Browsing Mode details to disk. This vulnerability affects Firefox < 107.

Severity

CVSS 3.1

4.3 medium

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N

EPSS: 0.4% chance of exploitation in the next 30 days; higher than 37% of CVEs (scores of 2026-10-31)
CWE: CWE-1021
Published: 2022-12-22
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

mozilla:firefox

References

https://bugzilla.mozilla.org/show_bug.cgi?id=1794508
https://www.mozilla.org/security/advisories/mfsa2022-47/
https://bugzilla.mozilla.org/show_bug.cgi?id=1794508
https://www.mozilla.org/security/advisories/mfsa2022-47/
https://bugzilla.mozilla.org/show_bug.cgi?id=1794508

Check your stack JSON