Staging Environment: Content and features may be unstable or change without notice.
Search for vulnerabilities
Vulnerability details: VCID-drq5-6jps-skax
Vulnerability ID VCID-drq5-6jps-skax
Aliases CVE-2015-4491
Summary Multiple vulnerabilities have been found in Firefox, Thunderbird, Network Security Services (NSS), and NetScape Portable Runtime (NSPR) with the worst of which may allow remote execution of arbitrary code.
Status Published
Exploitability 0.5
Weighted Severity 8.0
Risk 4.0
Affected and Fixed Packages Package Details
Weaknesses (1)
CWE-122 Heap-based Buffer Overflow
System Score Found at
epss 0.04296 https://api.first.org/data/v1/epss?cve=CVE-2015-4491
epss 0.04296 https://api.first.org/data/v1/epss?cve=CVE-2015-4491
epss 0.04296 https://api.first.org/data/v1/epss?cve=CVE-2015-4491
epss 0.04296 https://api.first.org/data/v1/epss?cve=CVE-2015-4491
epss 0.04296 https://api.first.org/data/v1/epss?cve=CVE-2015-4491
epss 0.04296 https://api.first.org/data/v1/epss?cve=CVE-2015-4491
epss 0.04296 https://api.first.org/data/v1/epss?cve=CVE-2015-4491
epss 0.04296 https://api.first.org/data/v1/epss?cve=CVE-2015-4491
epss 0.04296 https://api.first.org/data/v1/epss?cve=CVE-2015-4491
cvssv2 6.8 https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
generic_textual high https://www.mozilla.org/en-US/security/advisories/mfsa2015-88
Reference id Reference type URL
https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-4491.json
https://api.first.org/data/v1/epss?cve=CVE-2015-4491
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4491
https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
1252290 https://bugzilla.redhat.com/show_bug.cgi?id=1252290
GLSA-201512-05 https://security.gentoo.org/glsa/201512-05
GLSA-201605-06 https://security.gentoo.org/glsa/201605-06
mfsa2015-88 https://www.mozilla.org/en-US/security/advisories/mfsa2015-88
RHSA-2015:1586 https://access.redhat.com/errata/RHSA-2015:1586
RHSA-2015:1682 https://access.redhat.com/errata/RHSA-2015:1682
RHSA-2015:1694 https://access.redhat.com/errata/RHSA-2015:1694
USN-2702-1 https://usn.ubuntu.com/2702-1/
USN-2712-1 https://usn.ubuntu.com/2712-1/
USN-2722-1 https://usn.ubuntu.com/2722-1/
No exploits are available.
Vector: AV:N/AC:M/Au:N/C:P/I:P/A:P Found at https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
Exploitability (E) Access Vector (AV) Access Complexity (AC) Authentication (Au) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

high

functional

unproven

proof_of_concept

not_defined

local

adjacent_network

network

high

medium

low

multiple

single

none

none

partial

complete

none

partial

complete

none

partial

complete
Exploit Prediction Scoring System (EPSS)
Percentile 0.88815
EPSS Score 0.04296
Published At April 1, 2026, 12:55 p.m.
Date Actor Action Source VulnerableCode Version
2026-04-01T13:04:49.185970+00:00 Gentoo Importer Import https://security.gentoo.org/glsa/201605-06 38.0.0