vulnerability

Red Hat: CVE-2022-45403: CVE-2022-45403 Mozilla: Service Workers might have learned size of cross-origin media files (Multiple Advisories)

Name: Red Hat: CVE-2022-45403: CVE-2022-45403 Mozilla: Service Workers might have learned size of cross-origin media files (Multiple Advisories)
Creator: Red Hat
Published: 2022-11-21T00:00:00.000Z
Keywords: CVE, CWE-203, Red Hat, 2022, 45403, 45403 Mozilla, redhat-upgrade-firefox, redhat-upgrade-firefox-debuginfo, redhat-upgrade-firefox-debugsource, redhat-upgrade-thunderbird, redhat-upgrade-thunderbird-debuginfo, redhat-upgrade-thunderbird-debugsource, Severity 8

Try Surface Command

Back to search

Severity

CVSS

(AV:N/AC:H/Au:N/C:C/I:C/A:C)

Published

Nov 21, 2022

Added

Nov 22, 2022

Modified

Jun 17, 2026

Description

Service Workers should not be able to infer information about opaque cross-origin responses; but timing information for cross-origin media combined with Range requests might have allowed them to determine the presence or length of a media file. This vulnerability affects Firefox ESR < 102.5, Thunderbird < 102.5, and Firefox < 107.

Solutions

redhat-upgrade-firefoxredhat-upgrade-firefox-debuginforedhat-upgrade-firefox-debugsourceredhat-upgrade-thunderbirdredhat-upgrade-thunderbird-debuginforedhat-upgrade-thunderbird-debugsource

References

Rapid7 Labs

2026 Global Threat Landscape Report

The predictive window has collapsed. Exploitation follows disclosure in days. See how attackers are accelerating and how to stay ahead.

Get report