CVSS 3.1
9.8 criticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:HCVE-2021-43527
Critical (9.8). EPSS 18% chance of exploitation in the next 30 days.
NSS (Network Security Services) versions prior to 3.73 or 3.68.1 ESR are vulnerable to a heap overflow when handling DER-encoded DSA or RSA-PSS signatures. Applications using NSS for handling signatures encoded within CMS, S/MIME, PKCS \#7, or PKCS \#12 are likely to be impacted. Applications using NSS for certificate validation or other TLS, X.509, OCSP or CRL functionality may be impacted, depending on how they configure NSS. *Note: This vulnerability does NOT impact Mozilla Firefox.* However, email clients and PDF viewers that use NSS for signature verification, such as Thunderbird, LibreOffice, Evolution and Evince are believed to be impacted. This vulnerability affects NSS < 3.73 and NSS < 3.68.1.
Severity
- EPSS
- 18% chance of exploitation in the next 30 days; higher than 97% of CVEs (scores of 2026-10-31)
- CWE
- CWE-787
- Published
- Modified
- Record from
- the NVD, synced
Affected
- mozilla:nss
- mozilla:nss_esr
- netapp:cloud_backup
- netapp:e-series_santricity_os_controller
- oracle:communications_cloud_native_core_binding_support_function
- oracle:communications_cloud_native_core_network_repository_function
- oracle:communications_cloud_native_core_network_slice_selection_function
- oracle:communications_policy_management
- starwindsoftware:starwind_san_\&_nas
- starwindsoftware:starwind_virtual_san