Known vulnerabilities in Mozilla NSS

Vendor: Mozilla
Software: Mozilla NSS
Software CPE: cpe:2.3:a:mozilla:mozilla_nss:*:*:*:*:*:*:*:*
Total vulnerabilities: 30
Public exploits: 0
Known exploited (KEV): 0

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Mozilla NSS Mozilla NSS is affected by 30 known vulnerabilities: 8 high, 13 medium, 9 low Critical High Medium Low

Vulnerabilities (30)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU123207 - Integer overflow
CVE-2026-2781
CWE-190 Low
No
No
3.112.3, 3.120.1, 3.121 24.02.2026 SB2026022446
SB2026022526
SB2026022527
and 43 more
#VU85267 - Covert Timing Channel
CVE-2023-5388
CWE-385 Medium
No
No
- 10.01.2024 SB2024011031
SB2024011042
SB2024011043
and 96 more
#VU84108 - Covert Timing Channel
CVE-2023-4421
CWE-385 Medium
No
No
3.61 12.12.2023 SB2023121264
SB2023121268
SB2024011506
and 3 more
#VU68967 - Stack-based buffer overflow
CVE-2022-3479
CWE-121 Medium
No
No
3.81 04.11.2022 SB2022110401
SB2022110406
SB2022121901
and 18 more
#VU58477 - Heap-based Buffer Overflow
CVE-2021-43527
CWE-122 High
No
No
3.68.1, 3.73 01.12.2021 SB2021120123
SB2021120124
SB2021120201
and 66 more
#VU47910 - Allocation of Resources Without Limits or Throttling
CVE-2020-25648
CWE-770 Medium
No
No
- 21.10.2020 SB2020102132
SB2020102609
SB2021050605
and 18 more
#VU47197 - Heap-based Buffer Overflow
CVE-2019-17006
CWE-122 High
No
No
3.46 30.09.2020 SB2019090221
SB2020093089
SB2020062437
and 20 more
#VU45799 - Out-of-bounds read
CVE-2020-12403
CWE-125 Medium
No
No
3.55 20.08.2020 SB2020082004
SB2020082005
SB2020072966
and 17 more
#VU45798 - Use of a Broken or Risky Cryptographic Algorithm
CVE-2020-12401
CWE-327 Low
No
No
3.55 20.08.2020 SB2020082004
SB2020082005
SB2020072965
and 19 more
#VU45797 - Use of a Broken or Risky Cryptographic Algorithm
CVE-2020-12400
CWE-327 Low
No
No
3.55 20.08.2020 SB2020082004
SB2020082005
SB2020072964
and 19 more
#VU45693 - Memory corruption
CVE-2012-0441
CWE-119 High
No
No
3.13.4 14.08.2020 SB2012060604
SB2012070326
SB2012072531
and 1 more
#VU33989 - Heap-based Buffer Overflow
CVE-2015-7182
CWE-122 High
No
No
3.19.2.1, 3.20.1 05.08.2020 SB2015110501
SB2015113006
SB2015110503
and 4 more
#VU33988 - Memory corruption
CVE-2015-7181
CWE-119 High
No
No
3.19.2.1, 3.20.1 05.08.2020 SB2015110501
SB2015113005
SB2015110503
and 4 more
#VU28522 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CVE-2020-12399
CWE-362 Medium
No
No
3.44.4, 3.53 02.06.2020 SB2020060214
SB2020060215
SB2020060216
and 17 more
#VU2243 - Information Exposure Through Timing Discrepancy
CVE-2016-9074
CWE-208 Low
No
No
3.26.1 21.12.2016 SB2017010404
SB2016112114
#VU4083 - NULL Pointer Dereference
CVE-2016-5285
CWE-476 Medium
No
No
3.25 01.10.2016 SB2017010404
SB2023022238
SB2017050815
and 1 more
#VU33810 - Improper input validation
CVE-2016-2834
CWE-20 High
No
No
3.23 13.06.2016 SB2016061301
SB2016062405
SB2023022238
and 2 more
#VU32316 - Heap-based Buffer Overflow
CVE-2016-1950
CWE-122 High
No
No
3.19.2.3 13.03.2016 SB2016031303
SB2016032405
SB2016031014
and 1 more
#VU32328 - Cryptographic Issues
CVE-2016-1938
CWE-310 Medium
No
No
- 31.01.2016 SB2016013101
SB2016022505
SB2016021708
#VU32555 - Improper input validation
CVE-2014-1492
CWE-20 Medium
No
No
- 25.03.2014 SB2014032504
SB2014041722
SB2015052705
and 6 more


Showing elements 1 - 20 out of 30