Mozilla nss

Name: Mozilla nss
Brand: Mozilla

productEU

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

KEV-listed

public exploit

by severity

3critical1high7medium0low

updated 2026-10-28

vulnerabilities (11)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2021-43527US	critical9.8	17.6% (97th)	—	3.68.1	2021-12-08	2 versions
CVE-2019-17006US	critical9.8OT elevated	3.56% (89th)	—	3.46	2020-10-22	unspecified → 3.46
CVE-2015-7575US	medium5.9	2.90% (87th)	—	3.20.2	2016-01-09	< 3.20.2
CVE-2016-8635US	medium5.9	1.99% (81st)	—	no fix	2018-08-01	≤ 3.21.x
CVE-2018-18508US	medium6.5	1.97% (80th)	—	3.41.1	2020-10-22	2 versions
CVE-2020-12403US	critical9.1	1.54% (75th)	—	3.55	2021-05-27	< 3.55
CVE-2020-6829US	medium5.3	1.48% (74th)	—	3.55	2020-10-28	< 3.55
CVE-2019-17007US	high7.5	1.40% (72nd)	—	3.44	2020-10-22	unspecified → 3.44
CVE-2023-4421US	medium6.5	0.76% (55th)	—	3.61	2023-12-12	2 versions
CVE-2020-12401US	medium4.7OT elevated	0.33% (25th)	—	3.55	2020-10-08	< 3.55
CVE-2020-12400US	medium4.7OT elevated	0.27% (19th)	—	3.55	2020-10-08	< 3.55

The flaw types (CWEs) most of these CVEs share.

CWE-203Observable Discrepancy3 CVEs
CWE-122Heap-based Buffer Overflow2 CVEs
CWE-327Use of a Broken or Risky Cryptographic Algorithm2 CVEs
CWE-476NULL Pointer Dereference2 CVEs
CWE-119Improper Restriction of Operations within the Bounds of a Memory Buffer1 CVEs
CWE-125Out-of-bounds Read1 CVEs
CWE-17CWE-171 CVEs
CWE-19CWE-191 CVEs

Which sources assert this record, and when.

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.