https://vulnerability.circl.lu/rss/recent/all/10 Most recent entries from all 2026-10-02T10:11:53.540686+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent entries. https://vulnerability.circl.lu/vuln/cve-2021-43527 CVE-2021-43527 2026-10-02T10:11:55.199606+00:00

Affected: Mozilla NSS

NSS (Network Security Services) versions prior to 3.73 or 3.68.1 ESR are vulnerable to a heap overflow when handling DER-encoded DSA or RSA-PSS signatures. Applications using NSS for handling signatures encoded within CMS, S/MIME, PKCS \#7, or PKCS \#12 are likely to be impacted. Applications using NSS for certificate validation or other TLS, X.509, OCSP or CRL functionality may be impacted, depending on how they configure NSS. *Note: This vulnerability does NOT impact Mozilla Firefox.* However, email clients and PDF viewers that use NSS for signature verification, such as Thunderbird, LibreOffice, Evolution and Evince are believed to be impacted. This vulnerability affects NSS < 3.73 and NSS < 3.68.1.

 https://vulnerability.circl.lu/vuln/usn-5168-1 USN-5168-1 — nss vulnerability 2026-10-02T10:11:55.199727+00:00

Affected: Ubuntu:18.04:LTS: nss, Ubuntu:20.04:LTS: nss

Tavis Ormandy discovered that NSS incorrectly handled verifying DSA/RSA-PSS signatures. A remote attacker could use this issue to cause NSS to crash, resulting in a denial of service, or possibly execute arbitrary code.