Mozilla nss vulnerabilities

CVEs per yearBy the year they were published

1. 20181
2. 20203
3. 20211
4. 20231

Newest CVEs

• CVE-2023-4421

  The NSS code used for checking PKCS#1 v1.5 was leaking information useful in mounting Bleichenbacher-like attacks. Both the overall correctness of the padding…

  Mozilla · NSS

  Medium6.5
• CVE-2021-43527

  NSS (Network Security Services) versions prior to 3.73 or 3.68.1 ESR are vulnerable to a heap overflow when handling DER-encoded DSA or RSA-PSS signatures.…

  Mozilla · NSS

  Critical9.8
• CVE-2019-17007

  In Network Security Services before 3.44, a malformed Netscape Certificate Sequence can cause NSS to crash, resulting in a denial of service.

  Mozilla · NSS

  High7.5
• CVE-2019-17006

  In Network Security Services (NSS) before 3.46, several cryptographic primitives had missing length checks. In cases where the application calling the library…

  Mozilla · NSS

  Critical9.8
• CVE-2018-18508

  In Network Security Services (NSS) before 3.36.7 and before 3.41.1, a malformed signature can cause a crash due to a null dereference, resulting in a Denial of…

  Mozilla · NSS

  Medium6.5
• CVE-2016-8635

  It was found that Diffie Hellman Client key exchange handling in NSS 3.21.x was vulnerable to small subgroup confinement attack. An attacker could use this…

  Mozilla · nss

  Medium5.3