https://vulnerability.circl.lu/rss/recent/all/10 Most recent entries from all 2026-10-02T09:02:51.133761+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent entries. https://vulnerability.circl.lu/vuln/cve-2020-12399 CVE-2020-12399 2026-10-02T09:02:53.717542+00:00

Affected: Mozilla Thunderbird, Mozilla Firefox, Mozilla Firefox ESR

NSS has shown timing differences when performing DSA signatures, which was exploitable and could eventually leak private keys. This vulnerability affects Thunderbird < 68.9.0, Firefox < 77, and Firefox ESR < 68.9.

 https://vulnerability.circl.lu/vuln/usn-4383-1 USN-4383-1 — firefox vulnerabilities 2026-10-02T09:02:53.717692+00:00

Affected: Ubuntu:16.04:LTS: firefox, Ubuntu:18.04:LTS: firefox, Ubuntu:20.04:LTS: firefox

Multiple security issues were discovered in Firefox. If a user were tricked in to opening a specially crafted website, an attacker could potentially exploit these to cause a denial of service, spoof the addressbar, or execute arbitrary code. (CVE-2020-12405, CVE-2020-12406, CVE-2020-12407, CVE-2020-12408, CVE-2020-12409, CVE-2020-12410, CVE-2020-12411)

It was discovered that NSS showed timing differences when performing DSA signatures. An attacker could potentially exploit this to obtain private keys using a timing attack. (CVE-2020-12399)