CVE-2022-45409

CVE-2022-45409 is a high-severity use-after-free vulnerability affecting Mozilla Firefox (versions prior to 107), Firefox ESR (prior to 102.5), and Thunderbird (prior to 102.5). This flaw stems from the garbage collector potentially aborting prematurely, leading to a crash and possible remote code execution. With a CVSS score of 8.8, it presents a significant risk due to its network-based attack vector and low attack complexity, allowing an unauthenticated attacker to achieve high impact on confidentiality, integrity, and availability. There is currently no evidence of active exploitation, public exploit code, or significant community discussion surrounding this vulnerability.