{"id":"CVE-2026-12318","aliases":["DEBIAN-CVE-2026-12318","EUVD-2026-37109","GHSA-6q4q-pwxf-8h4v","OESA-2026-3995","OESA-2026-3996","OESA-2026-3997","OESA-2026-3998","OESA-2026-4103","UBUNTU-CVE-2026-12318","USN-8481-1","openSUSE-SU-2026:11052-1","openSUSE-SU-2026:11373-1"],"status":"published","title":"Incorrect boundary conditions in the Libraries component in NSS","description":"Incorrect boundary conditions in the Libraries component in NSS. This vulnerability was fixed in Firefox 152 and Thunderbird 152.","severity":{"version":"3.1","score":7.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L","level":"high","assessor":"adp","from":"cve"},"epss":{"day":"2026-11-12","score":0.00263,"percentile":0.18323,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-119"],"published":"2026-06-16T11:52:51Z","modified":"2026-10-27T09:47:29Z","fixes":[{"ecosystem":"Debian:12","package":"nss","fixed_in":["2:3.87.1-1+deb12u3"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"nss","fixed_in":["2:3.110-1+deb13u3"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"nss","fixed_in":["2:3.124-1"],"sources":["osv"]},{"ecosystem":"openEuler:20.03-LTS-SP4","package":"nss","fixed_in":["3.54.0-15.oe2003sp4"],"sources":["osv"]},{"ecosystem":"openEuler:22.03-LTS-SP4","package":"nss","fixed_in":["3.72.0-13.oe2203sp4"],"sources":["osv"]},{"ecosystem":"openEuler:24.03-LTS-SP1","package":"nss","fixed_in":["3.94.0-11.oe2403sp1"],"sources":["osv"]},{"ecosystem":"openEuler:24.03-LTS-SP3","package":"nss","fixed_in":["3.94.0-11.oe2403sp3"],"sources":["osv"]},{"ecosystem":"openEuler:24.03-LTS-SP4","package":"nss","fixed_in":["3.94.0-11.oe2403sp4"],"sources":["osv"]},{"ecosystem":"Ubuntu:22.04:LTS","package":"nss","fixed_in":["2:3.98-0ubuntu0.22.04.4"],"sources":["osv"]},{"ecosystem":"Ubuntu:24.04:LTS","package":"nss","fixed_in":["2:3.98-1ubuntu0.2"],"sources":["osv"]},{"ecosystem":"Ubuntu:25.10","package":"nss","fixed_in":["2:3.114-1ubuntu0.2"],"sources":["osv"]},{"ecosystem":"Ubuntu:26.04:LTS","package":"nss","fixed_in":["2:3.120-1ubuntu2.1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Debian:12","package":"nss","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:3.87.1-1+deb12u3"}]}],"versions":["2:3.87.1-1","2:3.87.1-1+deb12u1","2:3.87.1-1+deb12u2"]},{"source":"osv","ecosystem":"Debian:13","package":"nss","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:3.110-1+deb13u3"}]}],"versions":["2:3.110-1","2:3.110-1+deb13u1","2:3.110-1+deb13u2"]},{"source":"osv","ecosystem":"Debian:14","package":"nss","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:3.124-1"}]}],"versions":["2:3.110-1","2:3.111-1","2:3.112-1","2:3.114-1","2:3.116-1","2:3.117-1","2:3.119-1","2:3.120-1","2:3.121-1","2:3.123-1","2:3.123.1-1"]},{"source":"osv","ecosystem":"openEuler:20.03-LTS-SP4","package":"nss","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.54.0-15.oe2003sp4"}]}]},{"source":"osv","ecosystem":"openEuler:22.03-LTS-SP4","package":"nss","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.72.0-13.oe2203sp4"}]}]},{"source":"osv","ecosystem":"openEuler:24.03-LTS-SP1","package":"nss","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.94.0-11.oe2403sp1"}]}]},{"source":"osv","ecosystem":"openEuler:24.03-LTS-SP3","package":"nss","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.94.0-11.oe2403sp3"}]}]},{"source":"osv","ecosystem":"openEuler:24.03-LTS-SP4","package":"nss","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.94.0-11.oe2403sp4"}]}]},{"source":"osv","ecosystem":"Ubuntu:Pro:14.04:LTS","package":"nss","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2:3.15.1-1ubuntu1","2:3.15.2-1","2:3.15.3-1","2:3.15.3.1-1","2:3.15.3.1-1.1","2:3.15.3.1-1.1ubuntu1","2:3.15.4-1ubuntu3","2:3.15.4-1ubuntu4","2:3.15.4-1ubuntu5","2:3.15.4-1ubuntu6","2:3.15.4-1ubuntu7","2:3.15.4-1ubuntu7.1","2:3.17-0ubuntu0.14.04.1","2:3.17.1-0ubuntu0.14.04.1","2:3.17.1-0ubuntu0.14.04.2","2:3.17.4-0ubuntu0.14.04.1","2:3.19.2-0ubuntu0.14.04.1","2:3.19.2.1-0ubuntu0.14.04.1","2:3.19.2.1-0ubuntu0.14.04.2","2:3.21-0ubuntu0.14.04.1","2:3.21-0ubuntu0.14.04.2","2:3.23-0ubuntu0.14.04.1","2:3.26.2-0ubuntu0.14.04.3","2:3.28.4-0ubuntu0.14.04.1","2:3.28.4-0ubuntu0.14.04.2","2:3.28.4-0ubuntu0.14.04.3","2:3.28.4-0ubuntu0.14.04.4","2:3.28.4-0ubuntu0.14.04.5","2:3.28.4-0ubuntu0.14.04.5+esm1","2:3.28.4-0ubuntu0.14.04.5+esm2","2:3.28.4-0ubuntu0.14.04.5+esm3","2:3.28.4-0ubuntu0.14.04.5+esm4","2:3.28.4-0ubuntu0.14.04.5+esm5","2:3.28.4-0ubuntu0.14.04.5+esm6","2:3.28.4-0ubuntu0.14.04.5+esm7","2:3.28.4-0ubuntu0.14.04.5+esm8","2:3.28.4-0ubuntu0.14.04.5+esm9","2:3.28.4-0ubuntu0.14.04.5+esm10","2:3.28.4-0ubuntu0.14.04.5+esm11","2:3.28.4-0ubuntu0.14.04.5+esm12","2:3.28.4-0ubuntu0.14.04.5+esm13","2:3.28.4-0ubuntu0.14.04.5+esm14"]},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"nss","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2:3.19.2-1ubuntu1","2:3.19.2.1-0ubuntu1","2:3.21-1ubuntu2","2:3.21-1ubuntu3","2:3.21-1ubuntu4","2:3.23-0ubuntu0.16.04.1","2:3.26.2-0ubuntu0.16.04.2","2:3.28.4-0ubuntu0.16.04.1","2:3.28.4-0ubuntu0.16.04.2","2:3.28.4-0ubuntu0.16.04.3","2:3.28.4-0ubuntu0.16.04.4","2:3.28.4-0ubuntu0.16.04.5","2:3.28.4-0ubuntu0.16.04.6","2:3.28.4-0ubuntu0.16.04.8","2:3.28.4-0ubuntu0.16.04.9","2:3.28.4-0ubuntu0.16.04.10","2:3.28.4-0ubuntu0.16.04.11","2:3.28.4-0ubuntu0.16.04.12","2:3.28.4-0ubuntu0.16.04.13","2:3.28.4-0ubuntu0.16.04.14","2:3.28.4-0ubuntu0.16.04.14+esm1","2:3.28.4-0ubuntu0.16.04.14+esm2","2:3.28.4-0ubuntu0.16.04.14+esm3","2:3.28.4-0ubuntu0.16.04.14+esm4","2:3.28.4-0ubuntu0.16.04.14+esm5","2:3.28.4-0ubuntu0.16.04.14+esm6"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"mozjs52","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["52.3.1-0ubuntu3","52.3.1-7fakesync1","52.8.1-0ubuntu0.18.04.1","52.9.1-0ubuntu0.18.04.1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"nss","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2:3.32-1ubuntu3","2:3.34-1ubuntu1","2:3.35-2ubuntu2","2:3.35-2ubuntu2.1","2:3.35-2ubuntu2.2","2:3.35-2ubuntu2.3","2:3.35-2ubuntu2.5","2:3.35-2ubuntu2.6","2:3.35-2ubuntu2.7","2:3.35-2ubuntu2.8","2:3.35-2ubuntu2.9","2:3.35-2ubuntu2.11","2:3.35-2ubuntu2.12","2:3.35-2ubuntu2.13","2:3.35-2ubuntu2.14","2:3.35-2ubuntu2.15","2:3.35-2ubuntu2.16","2:3.35-2ubuntu2.16+esm1","2:3.35-2ubuntu2.16+esm2"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"mozjs38","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["38.8.0~repack1-0ubuntu1","38.8.0~repack1-0ubuntu3","38.8.0~repack1-0ubuntu4"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"mozjs68","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["68.5.0-1~fakesync","68.5.0-2~fakesync","68.6.0-1","68.6.0-1ubuntu1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:20.04:LTS","package":"nss","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2:3.45-1ubuntu2","2:3.47-1ubuntu1","2:3.47-1ubuntu2","2:3.48-1ubuntu1","2:3.49.1-1ubuntu1","2:3.49.1-1ubuntu1.1","2:3.49.1-1ubuntu1.2","2:3.49.1-1ubuntu1.4","2:3.49.1-1ubuntu1.5","2:3.49.1-1ubuntu1.6","2:3.49.1-1ubuntu1.7","2:3.49.1-1ubuntu1.8","2:3.49.1-1ubuntu1.9","2:3.98-0ubuntu0.20.04.1","2:3.98-0ubuntu0.20.04.2","2:3.98-0ubuntu0.20.04.2+esm1","2:3.98-0ubuntu0.20.04.2+esm2"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"mozjs52","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["52.9.1-1build1","52.9.1-1ubuntu3"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"mozjs102","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["102.11.0-0ubuntu0.22.04.1","102.12.0-0ubuntu0.22.04.1","102.13.0-0ubuntu0.22.04.1","102.15.1-0ubuntu0.22.04.1"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"mozjs78","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["78.13.0-1","78.15.0-2","78.15.0-4ubuntu1"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"mozjs91","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["91.5.1-0ubuntu1","91.6.0-1","91.6.0-2","91.7.0-2","91.10.0-0ubuntu1"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"nss","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:3.98-0ubuntu0.22.04.4"}]}],"versions":["2:3.68-1ubuntu1","2:3.68-1ubuntu2","2:3.68.2-0ubuntu1","2:3.68.2-0ubuntu1.1","2:3.68.2-0ubuntu1.2","2:3.98-0ubuntu0.22.04.1","2:3.98-0ubuntu0.22.04.2","2:3.98-0ubuntu0.22.04.3"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"thunderbird","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1:91.1.2+build1-0ubuntu1","1:91.3.0+build2-0ubuntu1","1:91.3.1+build1-0ubuntu1","1:91.3.2+build1-0ubuntu1","1:91.4.0+build1.1-0ubuntu1","1:91.4.0+build2-0ubuntu1","1:91.5.0+build1-0ubuntu1","1:91.5.1+build1-0ubuntu1","1:91.6.1+build1-0ubuntu1","1:91.7.0+build1-0ubuntu1","1:91.7.0+build2-0ubuntu1","1:91.8.0+build2-0ubuntu1","1:91.9.1+build1-0ubuntu0.22.04.1","1:91.11.0+build2-0ubuntu0.22.04.1","1:102.2.2+build1-0ubuntu0.22.04.1","1:102.4.2+build2-0ubuntu0.22.04.1","1:102.7.1+build2-0ubuntu0.22.04.1","1:102.8.0+build2-0ubuntu0.22.04.1","1:102.9.0+build1-0ubuntu0.22.04.1","1:102.10.0+build2-0ubuntu0.22.04.1","1:102.11.0+build1-0ubuntu0.22.04.1","1:102.13.0+build1-0ubuntu0.22.04.1","1:102.15.0+build1-0ubuntu0.22.04.1","1:102.15.1+build1-0ubuntu0.22.04.1","1:115.3.1+build1-0ubuntu0.22.04.2","1:115.4.1+build1-0ubuntu0.22.04.1","1:115.5.0+build1-0ubuntu0.22.04.1","1:115.6.0+build2-0ubuntu0.22.04.1","1:115.8.1+build1-0ubuntu0.22.04.1","1:115.9.0+build1-0ubuntu0.22.04.1","1:115.10.1+build1-0ubuntu0.22.04.1","1:115.11.0+build2-0ubuntu0.22.04.1","1:115.12.0+build3-0ubuntu0.22.04.1","1:115.13.0+build5-0ubuntu0.22.04.1","1:115.15.0+build1-0ubuntu0.22.04.1","1:115.16.0+build2-0ubuntu0.22.04.1","1:115.18.0+build1-0ubuntu0.22.04.1","1:128.12.0+build1-0ubuntu0.22.04.1","1:140.7.1+build1-0ubuntu0.22.04.1"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"mozjs102","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["102.15.1-1","102.15.1-3ubuntu2"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"mozjs115","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["115.3.0-0ubuntu1","115.4.0-2","115.5.0-1","115.6.0-1","115.7.0-4","115.8.0-1","115.9.0-1","115.9.0-1build1","115.10.0-1"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"nss","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:3.98-1ubuntu0.2"}]}],"versions":["2:3.92-1","2:3.94-1","2:3.95-1","2:3.96.1-1","2:3.98-1","2:3.98-1build1","2:3.98-1ubuntu0.1"]},{"source":"osv","ecosystem":"Ubuntu:25.10","package":"nss","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:3.114-1ubuntu0.2"}]}],"versions":["2:3.108-1ubuntu1","2:3.110-1","2:3.111-1","2:3.112-1","2:3.114-1","2:3.114-1ubuntu0.1"]},{"source":"osv","ecosystem":"Ubuntu:26.04:LTS","package":"nss","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:3.120-1ubuntu2.1"}]}],"versions":["2:3.114-1","2:3.117-1","2:3.119-1","2:3.120-1","2:3.120-1ubuntu1","2:3.120-1ubuntu2"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"nss","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:3.98-0ubuntu0.22.04.4"}]}],"versions":["2:3.68-1ubuntu1","2:3.68-1ubuntu2","2:3.68.2-0ubuntu1","2:3.68.2-0ubuntu1.1","2:3.68.2-0ubuntu1.2","2:3.98-0ubuntu0.22.04.1","2:3.98-0ubuntu0.22.04.2","2:3.98-0ubuntu0.22.04.3"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"nss","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:3.98-1ubuntu0.2"}]}],"versions":["2:3.92-1","2:3.94-1","2:3.95-1","2:3.96.1-1","2:3.98-1","2:3.98-1build1","2:3.98-1ubuntu0.1"]},{"source":"osv","ecosystem":"Ubuntu:25.10","package":"nss","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:3.114-1ubuntu0.2"}]}],"versions":["2:3.108-1ubuntu1","2:3.110-1","2:3.111-1","2:3.112-1","2:3.114-1","2:3.114-1ubuntu0.1"]},{"source":"osv","ecosystem":"Ubuntu:26.04:LTS","package":"nss","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:3.120-1ubuntu2.1"}]}],"versions":["2:3.114-1","2:3.117-1","2:3.119-1","2:3.120-1","2:3.120-1ubuntu1","2:3.120-1ubuntu2"]},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"MozillaFirefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"152.0-1.1"}]}],"bundled":40},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"firefox-esr","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"153.0-1.1"}]}],"bundled":228}],"products":[{"vendor":"mozilla","product":"firefox"},{"vendor":"mozilla","product":"thunderbird"}],"references":[{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=2023478","tags":["Permissions Required"]},{"url":"https://www.mozilla.org/security/advisories/mfsa2026-57/","tags":["Vendor Advisory"]},{"url":"https://www.mozilla.org/security/advisories/mfsa2026-60/","tags":["Vendor Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-12318","tags":["advisory"]},{"url":"https://www.mozilla.org/security/advisories/mfsa2026-57"},{"url":"https://www.mozilla.org/security/advisories/mfsa2026-60"},{"url":"https://github.com/advisories/GHSA-6q4q-pwxf-8h4v"},{"url":"https://security-tracker.debian.org/tracker/CVE-2026-12318","tags":["advisory"]},{"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-3995","tags":["advisory"]},{"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-3996","tags":["advisory"]},{"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-3997","tags":["advisory"]},{"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-3998","tags":["advisory"]},{"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-4103","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2026-12318","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-12318","tags":["report"]},{"url":"https://www.mozilla.org/en-US/security/advisories/mfsa2026-57/#CVE-2026-12318","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-8481-1","tags":["advisory"]},{"url":"","tags":["advisory"]},{"url":"https://www.suse.com/security/cve/CVE-2026-12289","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-12290","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-12291","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-12292","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-12293","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-12294","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-12295","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-12296","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-12297","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-12298","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-12299","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-12300","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-12301","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-12302","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-12303","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-12304","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-12305","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-12306","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-12307","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-12308","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-12309","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-12310","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-12311","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-12312","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-12313","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-12314","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-12315","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-12316","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-12317","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-12318","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-12319","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-12320","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-12321","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-12322","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-12323","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-12324","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-12325","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-12326","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-12327","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-12328","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-10468","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-11700","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-11701","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-11702","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-11703","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-11705","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-11706","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-11708","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-7523","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-7530","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-8388","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-8389","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-9391","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-9395","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-9403","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-9936","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-9956","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-0244","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-0245","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-0246","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-0247","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-1018","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-1019","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-1020","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-10530","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-10531","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-10534","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-10535","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-11152","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-11153","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-11716","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-11717","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-11718","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-11719","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-11720","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-11721","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-12380","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-13012","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-13013","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-13014","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-13015","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-13016","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-13017","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-13018","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-13019","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-13020","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-13021","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-13022","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-13023","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-13024","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-13025","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-13026","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-13027","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-14326","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-14332","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-14860","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-14861","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-1939","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-1940","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-1941","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-1942","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-1943","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-3031","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-3032","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-3033","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-3034","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-3035","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-3608","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-4082","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-4083","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-4085","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-4086","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-4087","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-4088","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-4089","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-4090","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-4091","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-4092","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-49709","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-49710","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-5270","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-5271","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-5272","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-8041","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-8042","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-8043","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-8044","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-9186","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-9187","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-0881","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-0888","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-0889","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-0892","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-10701","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-10702","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-14241","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-16364","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-16365","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-16366","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-16367","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-16370","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-16372","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-16373","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-16376","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-16378","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-16380","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-16382","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-16384","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-16385","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-16386","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-16388","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-16389","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-16392","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-16393","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-16394","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-16395","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-16397","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-16398","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-16399","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-16400","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-16401","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-16402","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-16403","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-16404","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-16406","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-16407","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-16408","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-16409","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-16410","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-16411","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-24868","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-24869","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-2794","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-2795","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-2796","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-2797","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-2798","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-2799","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-2800","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-2801","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-2802","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-2803","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-2804","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-2805","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-2806","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-2807","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-3846","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-3847","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-4722","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-4723","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-4724","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-4725","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-4726","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-4727","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-4728","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-4729","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-5733","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-5735","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-6746","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-6747","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-6748","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-6749","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-6750","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-6751","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-6752","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-6753","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-6754","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-6755","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-6756","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-6757","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-6758","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-6759","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-6760","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-6761","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-6762","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-6763","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-6764","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-6765","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-6766","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-6767","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-6768","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-6769","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-6770","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-6771","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-6772","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-6773","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-6774","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-6775","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-6776","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-6777","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-6778","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-6779","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-6780","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-6781","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-6782","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-6783","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-6784","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-6785","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-6786","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-7324","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-8093","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-8945","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-8948","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-8951","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-8952","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-8960","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-8963","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-8964","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-8965","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-8966","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-8967","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-8969","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-8971","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-8972","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-8973","tags":["web"]}],"sources":{"cve":[{"id":"CVE-2026-12318","title":"Incorrect boundary conditions in the Libraries component in NSS","description":"Incorrect boundary conditions in the Libraries component in NSS. This vulnerability was fixed in Firefox 152 and Thunderbird 152.","status":"published","published":"2026-06-16T11:52:51.844Z","modified":"2026-06-16T18:07:00.082Z","cvss":[{"version":"3.1","score":7.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L","level":"high","assessor":"adp"}],"cwes":["CWE-119"],"updated_at":"2026-11-02T14:19:48.461833Z"}],"euvd":[{"id":"EUVD-2026-37109","description":"Incorrect boundary conditions in the Libraries component in NSS. This vulnerability was fixed in Firefox 152 and Thunderbird 152.","status":"published","published":"2026-06-16T11:52:51Z","modified":"2026-06-16T18:07:00Z","cvss":[{"version":"3.1","score":7.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L","level":"high"}],"updated_at":"2026-11-02T18:20:39.851172Z"}],"ghsa":[{"id":"GHSA-6q4q-pwxf-8h4v","title":"Incorrect boundary conditions in the Libraries component in NSS. This vulnerability was fixed in...","description":"Incorrect boundary conditions in the Libraries component in NSS. This vulnerability was fixed in Firefox 152.","status":"published","published":"2026-06-16T15:33:49Z","modified":"2026-06-16T21:31:56Z","cvss":[{"version":"3.1","score":7.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L","level":"high"}],"cwes":["CWE-119"],"updated_at":"2026-11-02T15:08:49.42455Z"}],"nvd":[{"id":"CVE-2026-12318","description":"Incorrect boundary conditions in the Libraries component in NSS. This vulnerability was fixed in Firefox 152 and Thunderbird 152.","status":"published","published":"2026-06-16T13:16:32.463Z","modified":"2026-10-26T12:10:00.13Z","cvss":[{"version":"3.1","score":7.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L","level":"high","assessor":"secondary"}],"cwes":["CWE-119"],"updated_at":"2026-11-02T14:12:24.19758Z"}],"osv":[{"id":"DEBIAN-CVE-2026-12318","description":"Incorrect boundary conditions in the Libraries component in NSS. This vulnerability was fixed in Firefox 152 and Thunderbird 152.","status":"published","published":"2026-06-16T13:16:32.463Z","modified":"2026-10-27T09:47:29.88545289Z","cvss":[{"version":"3.1","score":7.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L","level":"high"}],"updated_at":"2026-11-02T15:45:51.374409Z"},{"id":"OESA-2026-3995","title":"nss security update","description":"Network Security Services (NSS) is a set of libraries designed to support cross-platform development of security-enabled client and server applications. Applications built with NSS can support SSL v2 and v3, TLS, PKCS #5, PKCS #7, PKCS #11, PKCS #12, S/MIME, X.509 v3 certificates, and other security standards.\r\n\r\nSecurity Fix(es):\n\nIncorrect boundary conditions in the Libraries component in NSS. This vulnerability was fixed in Firefox 152 and Thunderbird 152.\n(CVE-2026-12318)","status":"published","published":"2026-09-20T13:23:57Z","modified":"2026-09-20T13:30:32.804536415Z","cvss":[{"version":"3.1","score":7.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L","level":"high"}],"updated_at":"2026-11-02T15:52:47.643553Z"},{"id":"OESA-2026-3996","title":"nss security update","description":"Network Security Services (NSS) is a set of libraries designed to support cross-platform development of security-enabled client and server applications. Applications built with NSS can support SSL v2 and v3, TLS, PKCS #5, PKCS #7, PKCS #11, PKCS #12, S/MIME, X.509 v3 certificates, and other security standards.\r\n\r\nSecurity Fix(es):\n\nIncorrect boundary conditions in the Libraries component in NSS. This vulnerability was fixed in Firefox 152 and Thunderbird 152.\n(CVE-2026-12318)","status":"published","published":"2026-09-20T13:23:57Z","modified":"2026-09-20T13:30:32.107415348Z","cvss":[{"version":"3.1","score":7.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L","level":"high"}],"updated_at":"2026-11-02T15:52:47.643553Z"},{"id":"OESA-2026-3997","title":"nss security update","description":"Network Security Services (NSS) is a set of libraries designed to support cross-platform development of security-enabled client and server applications. Applications built with NSS can support SSL v2 and v3, TLS, PKCS #5, PKCS #7, PKCS #11, PKCS #12, S/MIME, X.509 v3 certificates, and other security standards.\r\n\r\nSecurity Fix(es):\n\nIncorrect boundary conditions in the Libraries component in NSS. This vulnerability was fixed in Firefox 152 and Thunderbird 152.\n(CVE-2026-12318)","status":"published","published":"2026-09-20T13:23:58Z","modified":"2026-09-20T13:30:33.806571382Z","cvss":[{"version":"3.1","score":7.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L","level":"high"}],"updated_at":"2026-11-02T15:52:47.643553Z"},{"id":"OESA-2026-3998","title":"nss security update","description":"Network Security Services (NSS) is a set of libraries designed to support cross-platform development of security-enabled client and server applications. Applications built with NSS can support SSL v2 and v3, TLS, PKCS #5, PKCS #7, PKCS #11, PKCS #12, S/MIME, X.509 v3 certificates, and other security standards.\r\n\r\nSecurity Fix(es):\n\nIncorrect boundary conditions in the Libraries component in NSS. This vulnerability was fixed in Firefox 152 and Thunderbird 152.\n(CVE-2026-12318)","status":"published","published":"2026-09-20T13:23:58Z","modified":"2026-09-20T13:30:31.90617666Z","cvss":[{"version":"3.1","score":7.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L","level":"high"}],"updated_at":"2026-11-02T15:52:47.643553Z"},{"id":"OESA-2026-4103","title":"nss security update","description":"Network Security Services (NSS) is a set of libraries designed to support cross-platform development of security-enabled client and server applications. Applications built with NSS can support SSL v2 and v3, TLS, PKCS #5, PKCS #7, PKCS #11, PKCS #12, S/MIME, X.509 v3 certificates, and other security standards.\r\n\r\nSecurity Fix(es):\n\nIncorrect boundary conditions in the Libraries component in NSS. This vulnerability was fixed in Firefox 152 and Thunderbird 152.(CVE-2026-12318)","status":"published","published":"2026-09-25T01:28:25Z","modified":"2026-09-25T01:45:13.106662385Z","cvss":[{"version":"3.1","score":7.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L","level":"high"}],"updated_at":"2026-11-02T15:52:47.643553Z"},{"id":"UBUNTU-CVE-2026-12318","description":"Incorrect boundary conditions in the Libraries component in NSS. This vulnerability was fixed in Firefox 152 and Thunderbird 152.","status":"published","published":"2026-06-16T13:16:00Z","modified":"2026-10-21T23:01:45.846247915Z","cvss":[{"version":"3.1","score":7.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L","level":"high"}],"updated_at":"2026-11-02T16:56:00.592716Z"},{"id":"openSUSE-SU-2026:11052-1","title":"MozillaFirefox-152.0-1.1 on GA media","description":"These are all security issues fixed in the MozillaFirefox-152.0-1.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2026-06-18T00:00:00Z","modified":"2026-06-19T08:15:07.127853394Z","updated_at":"2026-11-02T16:58:38.95195Z"},{"id":"openSUSE-SU-2026:11373-1","title":"firefox-esr-153.0-1.1 on GA media","description":"These are all security issues fixed in the firefox-esr-153.0-1.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2026-07-25T00:00:00Z","modified":"2026-07-26T13:30:06.696244383Z","updated_at":"2026-11-02T16:58:39.516824Z"},{"id":"USN-8481-1","title":"nss vulnerability","description":"Haruto Kimura discovered that NSS had incorrecty handled parsing PKCS#11\nURI escape sequences. An attacker could possibly use this issue to cause\nNSS to crash, resulting in a denial of service, or obtain sensitive\ninformation.","status":"published","published":"2026-06-29T18:08:00Z","modified":"2026-06-30T03:49:30.555028269Z","updated_at":"2026-11-02T16:58:25.103481Z"}]}}