CVE-2022-45418

MediumCVSS 6.1/10Last modified Jun 17, 2026

Description

If a custom mouse cursor is specified in CSS, under certain circumstances the cursor could have been drawn over the browser UI, resulting in potential user confusion or spoofing attacks. This vulnerability affects Firefox ESR < 102.5, Thunderbird < 102.5, and Firefox < 107.

Metrics

CVSS 3.1 6.1/10CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Weakness enumeration

CWE-1021

Affected software

No affected versions have been published.

Timeline

Published: Dec 22, 2022
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2022

CVE-2022-454196.5If the user added a security exception for an invalid TLS certificate, opened an ongoing TLS connection with a server that used that certifi CVE-2022-45425.4The Compact WP Audio Player WordPress plugin before 1.9.8 does not validate and escape some of its shortcode attributes before outputting th CVE-2022-454206.5Use tables inside of an iframe, an attacker could have caused iframe contents to be rendered outside the boundaries of the iframe, resulting CVE-2022-454218.8Mozilla developers Andrew McCreight and Gabriele Svelto reported memory safety bugs present in Thunderbird 102.4. Some of these bugs showed CVE-2022-454227.8When LG SmartShare is installed, local privilege escalation is possible through DLL Hijacking attack. The LG ID is LVE-HOT-220005.CVE-2022-454237.5Some Dahua software products have a vulnerability of unauthenticated request of MQTT credentials. An attacker can obtain encrypted MQTT cred CVE-2022-454245.3Some Dahua software products have a vulnerability of unauthenticated request of AES crypto key. An attacker can obtain the AES crypto key by CVE-2022-454257.5Some Dahua software products have a vulnerability of using of hard-coded cryptographic key. An attacker can obtain the AES crypto key by exp CVE-2022-454266.5Some Dahua software products have a vulnerability of unrestricted download of file. After obtaining the permissions of ordinary users, by se CVE-2022-454277.2Some Dahua software products have a vulnerability of unrestricted upload of file. After obtaining the permissions of administrators, by send CVE-2022-454282.7Some Dahua software products have a vulnerability of sensitive information leakage. After obtaining the permissions of administrators, by se CVE-2022-454297.5Some Dahua software products have a vulnerability of server-side request forgery (SSRF). An Attacker can access internal resources by concat