Mozilla nss vulnerabilities
6 published CVEs name Mozilla nss among the affected products.
- 6Published CVEs6 of them scored
- 0Last 12 monthspublished in the last year
- 2Critical1 more rated high
- 0Known exploitedin CISA's KEV catalog
Newest CVEs
- CVE-2023-4421
The NSS code used for checking PKCS#1 v1.5 was leaking information useful in mounting Bleichenbacher-like attacks. Both the overall correctness of the padding…
Mozilla · NSS
Medium6.5 - CVE-2021-43527
NSS (Network Security Services) versions prior to 3.73 or 3.68.1 ESR are vulnerable to a heap overflow when handling DER-encoded DSA or RSA-PSS signatures.…
Mozilla · NSS
Critical9.8 - CVE-2019-17007
In Network Security Services before 3.44, a malformed Netscape Certificate Sequence can cause NSS to crash, resulting in a denial of service.
Mozilla · NSS
High7.5 - CVE-2019-17006
In Network Security Services (NSS) before 3.46, several cryptographic primitives had missing length checks. In cases where the application calling the library…
Mozilla · NSS
Critical9.8 - CVE-2018-18508
In Network Security Services (NSS) before 3.36.7 and before 3.41.1, a malformed signature can cause a crash due to a null dereference, resulting in a Denial of…
Mozilla · NSS
Medium6.5 - CVE-2016-8635
It was found that Diffie Hellman Client key exchange handling in NSS 3.21.x was vulnerable to small subgroup confinement attack. An attacker could use this…
Mozilla · nss
Medium5.3