CVE-2022-45418

6.1 mediumEPSS 0.8%

Medium (6.1) in mozilla. EPSS 0.8% chance of exploitation in the next 30 days.

If a custom mouse cursor is specified in CSS, under certain circumstances the cursor could have been drawn over the browser UI, resulting in potential user confusion or spoofing attacks. This vulnerability affects Firefox ESR < 102.5, Thunderbird < 102.5, and Firefox < 107.

Severity

CVSS 3.1

6.1 medium

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

EPSS: 0.8% chance of exploitation in the next 30 days; higher than 55% of CVEs (scores of 2026-10-31)
CWE: CWE-1021
Published: 2022-12-22
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

mozilla:firefox
mozilla:firefox_esr
mozilla:thunderbird

References

https://bugzilla.mozilla.org/show_bug.cgi?id=1795815
https://www.mozilla.org/security/advisories/mfsa2022-47/
https://www.mozilla.org/security/advisories/mfsa2022-48/
https://www.mozilla.org/security/advisories/mfsa2022-49/
https://bugzilla.mozilla.org/show_bug.cgi?id=1795815

Check your stack JSON