CVE-2015-7575Medium· 5.9▾ SunlitMozilla Network Security Services (NSS) before 3.20.2, as used in Mozilla Firefox before 43.0.2 and Firefox ESR 38.x before 38.5.2, does not reject MD5 signatures in Server Key Exchange messages in TLS 1.2 Handshake Protocol traffic, whi…
▾ Sunlit zone — Low / medium · no exploitation signal
impact 32.5 · likelihood 0.6 · exploitation 0
Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.
Stakeholder-Specific Vulnerability Categorization from CISA's ADP record at CVE.org: whether exploitation is observed, whether an attack can be automated, and how much of the system is at stake.
Exploit-prediction probability, daily snapshots since Oct 14.
Disclosure to exploitation, from the record and what we observed since indexing it.
Disclosed via NVD
Last analysed / modified upstream
2.9%
Mozilla Network Security Services (NSS) before 3.20.2, as used in Mozilla Firefox before 43.0.2 and Firefox ESR 38.x before 38.5.2, does not reject MD5 signatures in Server Key Exchange messages in TLS 1.2 Handshake Protocol traffic, which makes it easier for man-in-the-middle attackers to spoof servers by triggering a collision.
network_security_services <= 3.20.1leap = 42.1opensuse = 13.1opensuse = 13.2firefox = 38.0firefox = 38.0.1firefox = 38.0.5firefox = 38.1.0firefox = 38.1.1firefox = 38.2.0firefox = 38.2.1firefox = 38.3.0firefox = 38.4.0firefox = 38.5.0firefox = 38.5.1ubuntu_linux = 14.04ubuntu_linux = 15.04ubuntu_linux = 15.10firefox <= 43.0.1Refer to the linked advisories for vendor-supplied fixes and affected version ranges.
Connected by shared product, vendor, weakness, or advisory.
CVE-2026-118178NoneRSS feed could redirect its subscription to a local file or network share
CVE-2026-118175NoneContent of other messages could be included when replying to a crafted message
CVE-2026-118174NoneDisplaying a message could load an attacker-chosen URL through an OpenPGP key attachment
CVE-2026-118177NoneCalendar discovery accepted local file and remote network share locations
CVE-2026-118180NoneMatrix homeserver could redirect the chat session to a local file or network share
CVE-2026-118176NoneBypass of remote UNC path restriction in mailbox: URLs