cvedb.io
CVE-2016-9074
MEDIUM · CVSS 5.9
EPSS exploitation probability: 0%
Published 2018-06-11T21:29:01.497 · Last modified 2026-06-17T00:55:24.610

Summary

An existing mitigation of timing side-channel attacks is insufficient in some circumstances. This issue is addressed in Network Security Services (NSS) 3.26.1. This vulnerability affects Thunderbird < 45.5, Firefox ESR < 45.5, and Firefox < 50.

Affected products

mozilla — firefox

Does this affect you?

Add your gear to cvedb and we'll alert you only when mozilla ships something exploited.

Check my exposure →

References

This product uses data from the NVD API but is not endorsed or certified by the NVD. Informational only; not professional security advice.