Incorrect boundary conditions in the Libraries component in NSS. This vulnerability was fixed in Firefox 152 and Thunderbird 152.
CVSS Details
- CVSS 3.1 Base Score: 7.3
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade nss | Jul 23, 2026 | Jul 23, 2026 |
| Mfsa2026 57 | — | Upgrade to Mozilla Firefox version 152.0Upgrade to the latest version of Mozilla Firefox | Jun 16, 2026 | Jun 16, 2026 |
| Mozilla Thunderbird | — | Upgrade to Mozilla Thunderbird version 152.0Upgrade to the latest version of Mozilla Thunderbird | Jun 21, 2026 | Jun 16, 2026 |
| Ubuntu | — | Upgrade libnss3 | Jun 30, 2026 | Jun 29, 2026 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub