Dashboard / CVE-2022-46884

CVE-2022-46884

HIGH
MEDIUM Priority: 0.04 BB Relevance: 68/100
Published: 2023-08-24 Modified: 2026-11-10 First seen: 2026-11-10 Status: active

Attack Surface

Network Low Complexity No Auth Conf. Impact Integ. Impact

CVSS Vector Breakdown

AV: Network
AC: Low
PR: None
UI: Required
S: Unchanged
C: High
I: High
A: High

Description

A potential use-after-free vulnerability existed in SVG Images if the Refresh Driver was destroyed at an inopportune time. This could have lead to memory corruption or a potentially exploitable crash. *Note*: This advisory was added on December 13th, 2022 after discovering it was inadvertently left out of the original advisory. The fix was included in the original release of Firefox 106. This vulnerability affects Firefox < 106.

Weakness Classification (1)

Affected Software (1)

VendorProductVersion
mozilla firefox < 106.0

References & Advisories (2)

Bug Bounty Relevance

68 / 100
✓ Network accessible
✓ No authentication
✓ Low complexity

CVSS Score

8.8 / 10.0 v3.1
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

EPSS — Exploitation Probability

0.48%
Raw Score 0.004770
Percentile 41.7%
Date 2026-11-13

EPSS Trend

2026-11-13
0.00477
2026-11-12
0.00477
2026-11-10
0.00477
2026-11-09
0.00477

Intelligence Sources

nvd ref →

External Links