CVE-2026-12318

HIGH

Incorrect boundary conditions in the Libraries component in NSS. This vulnerability was fixed in Firefox 152 and Thunderbird 152.

StatusAnalyzed

설명

Incorrect boundary conditions in the Libraries component in NSS. This vulnerability was fixed in Firefox 152 and Thunderbird 152.

Score Summary

CVSS Score: 7.3
Version: 3.1
VPI: 73
Why this VPI (explainable, experimental)
VPI breakdown
Impact 73.00
Exploitation signal(No additional exploitation signal) ×1.00
VPI 73.00
VPI formula vpi-v1
EPSS: 0.3%
(상위 17.8%)
Attack Vector: Network
Low Complexity
No Privileges
No User Interaction
Scope Unchanged
Low Confidentiality Impact
Low Integrity Impact
Low Availability Impact

Details

CWE Weakness Classification

References (3)

Affected Products (2)

https://www.mozilla.org/security/advisories/mfsa2026-60/

Impact	73.00
Exploitation signal(No additional exploitation signal)	×1.00
VPI	73.00