Skip to content
CVE PROGRAM SOURCE RECORD6.1 Medium

CVE-2022-45418

If a custom mouse cursor is specified in CSS, under certain circumstances the cursor could have been drawn over the browser UI, resulting in potential user confusion or spoofing at

Description

If a custom mouse cursor is specified in CSS, under certain circumstances the cursor could have been drawn over the browser UI, resulting in potential user confusion or spoofing attacks. This vulnerability affects Firefox ESR < 102.5, Thunderbird < 102.5, and Firefox < 107.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Mozilla Firefox ESR

  • unspecified to < 102.5affected

Mozilla Thunderbird

  • unspecified to < 102.5affected

Mozilla Firefox

  • unspecified to < 107affected

References