Staging Environment: Content and features may be unstable or change without notice.
Search for vulnerabilities
Vulnerability details: VCID-2rn3-ydxb-5ugu
Vulnerability ID VCID-2rn3-ydxb-5ugu
Aliases CVE-2015-4477
Summary Multiple vulnerabilities have been found in Firefox, Thunderbird, Network Security Services (NSS), and NetScape Portable Runtime (NSPR) with the worst of which may allow remote execution of arbitrary code.
Status Published
Exploitability None
Weighted Severity None
Risk None
Affected and Fixed Packages Package Details
Weaknesses (1)
CWE-416 Use After Free
System Score Found at
epss 0.0291 https://api.first.org/data/v1/epss?cve=CVE-2015-4477
epss 0.0291 https://api.first.org/data/v1/epss?cve=CVE-2015-4477
epss 0.0291 https://api.first.org/data/v1/epss?cve=CVE-2015-4477
epss 0.0291 https://api.first.org/data/v1/epss?cve=CVE-2015-4477
epss 0.0291 https://api.first.org/data/v1/epss?cve=CVE-2015-4477
epss 0.0291 https://api.first.org/data/v1/epss?cve=CVE-2015-4477
epss 0.0291 https://api.first.org/data/v1/epss?cve=CVE-2015-4477
epss 0.0291 https://api.first.org/data/v1/epss?cve=CVE-2015-4477
epss 0.0291 https://api.first.org/data/v1/epss?cve=CVE-2015-4477
epss 0.0291 https://api.first.org/data/v1/epss?cve=CVE-2015-4477
epss 0.0291 https://api.first.org/data/v1/epss?cve=CVE-2015-4477
epss 0.0291 https://api.first.org/data/v1/epss?cve=CVE-2015-4477
epss 0.0291 https://api.first.org/data/v1/epss?cve=CVE-2015-4477
epss 0.0291 https://api.first.org/data/v1/epss?cve=CVE-2015-4477
epss 0.0291 https://api.first.org/data/v1/epss?cve=CVE-2015-4477
generic_textual critical https://www.mozilla.org/en-US/security/advisories/mfsa2015-81
Reference id Reference type URL
https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-4477.json
https://api.first.org/data/v1/epss?cve=CVE-2015-4477
1252277 https://bugzilla.redhat.com/show_bug.cgi?id=1252277
CVE-2015-4477 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4477
GLSA-201605-06 https://security.gentoo.org/glsa/201605-06
mfsa2015-81 https://www.mozilla.org/en-US/security/advisories/mfsa2015-81
USN-2702-1 https://usn.ubuntu.com/2702-1/
No exploits are available.
Exploit Prediction Scoring System (EPSS)
Percentile 0.86306
EPSS Score 0.0291
Published At April 1, 2026, 12:55 p.m.
Date Actor Action Source VulnerableCode Version
2026-04-01T13:04:46.813619+00:00 Gentoo Importer Import https://security.gentoo.org/glsa/201605-06 38.0.0