Known vulnerabilities in Mozilla NSS

Vendor: Mozilla
Software: Mozilla NSS
Software CPE: cpe:2.3:a:mozilla:mozilla_nss:*:*:*:*:*:*:*:*
Total vulnerabilities: 30
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Mozilla NSS Mozilla NSS is affected by 30 known vulnerabilities: 8 high, 13 medium, 9 low Critical High Medium Low

Vulnerabilities (30)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU123207 - Integer overflow
CVE-2026-2781
CWE-190 Low
No
No
3.112.3, 3.120.1, 3.121 24.02.2026 SB2026022446
SB2026022526
SB2026022527
and 43 more
#VU85267 - Covert Timing Channel
CVE-2023-5388
CWE-385 Medium
No
No
- 10.01.2024 SB2024011031
SB2024011042
SB2024011043
and 96 more
#VU84108 - Covert Timing Channel
CVE-2023-4421
CWE-385 Medium
No
No
3.61 12.12.2023 SB2023121264
SB2023121268
SB2024011506
and 3 more
#VU68967 - Stack-based buffer overflow
CVE-2022-3479
CWE-121 Medium
No
No
3.81 04.11.2022 SB2022110401
SB2022110406
SB2022121901
and 18 more
#VU58477 - Heap-based Buffer Overflow
CVE-2021-43527
CWE-122 High
No
No
3.68.1, 3.73 01.12.2021 SB2021120123
SB2021120124
SB2021120201
and 66 more
#VU47910 - Allocation of Resources Without Limits or Throttling
CVE-2020-25648
CWE-770 Medium
No
No
- 21.10.2020 SB2020102132
SB2020102609
SB2021050605
and 18 more
#VU47197 - Heap-based Buffer Overflow
CVE-2019-17006
CWE-122 High
No
No
3.46 30.09.2020 SB2019090221
SB2020093089
SB2020062437
and 19 more
#VU45799 - Out-of-bounds read
CVE-2020-12403
CWE-125 Medium
No
No
3.55 20.08.2020 SB2020082004
SB2020082005
SB2020072966
and 17 more
#VU45798 - Use of a Broken or Risky Cryptographic Algorithm
CVE-2020-12401
CWE-327 Low
No
No
3.55 20.08.2020 SB2020082004
SB2020082005
SB2020072965
and 19 more
#VU45797 - Use of a Broken or Risky Cryptographic Algorithm
CVE-2020-12400
CWE-327 Low
No
No
3.55 20.08.2020 SB2020082004
SB2020082005
SB2020072964
and 19 more
#VU28522 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CVE-2020-12399
CWE-362 Medium
No
No
3.44.4, 3.53 02.06.2020 SB2020060214
SB2020060215
SB2020060216
and 15 more
#VU23562 - Improper input validation
CVE-2019-11729
CWE-20 Medium
No
No
3.45 12.12.2019 SB2019062813
SB2019121210
SB2020031903
and 11 more
#VU23467 - Improper input validation
CVE-2019-17007
CWE-20 Medium
No
No
3.44.3, 3.47.1 09.12.2019 SB2019112801
SB2019120912
SB2019120913
and 4 more
#VU23050 - Out-of-bounds write
CVE-2019-11745
CWE-787 High
No
No
3.44.3, 3.47.1 28.11.2019 SB2019112801
SB2019112802
SB2019120312
and 29 more
#VU15735 - Channel Accessible by Non-Endpoint ('Man-in-the-Middle')
CVE-2018-12384
CWE-300 Low
No
No
3.36.5, 3.39 06.11.2018 SB2018110608
SB2018121303
SB2018123004
and 11 more
#VU7881 - Heap-based Buffer Overflow
CVE-2017-11698
CWE-122 Low
No
No
- 15.08.2017 SB2017081502
SB2020031706
#VU7880 - Divide By Zero
CVE-2017-11697
CWE-369 Low
No
No
- 15.08.2017 SB2017081502
SB2020031706
#VU7879 - Heap-based Buffer Overflow
CVE-2017-11696
CWE-122 Low
No
No
- 15.08.2017 SB2017081502
SB2020031706
#VU7878 - Heap-based Buffer Overflow
CVE-2017-11695
CWE-122 Low
No
No
- 15.08.2017 SB2017081502
SB2020031706
#VU6841 - NULL Pointer Dereference
CVE-2017-7502
CWE-476 Medium
No
No
- 31.05.2017 SB2017053101
SB2017053102
SB2017060216
and 5 more


Showing elements 1 - 20 out of 30