Staging Environment: Content and features may be unstable or change without notice.
Search for vulnerabilities
Vulnerability details: VCID-3bf4-ms9e-x3dq
Vulnerability ID VCID-3bf4-ms9e-x3dq
Aliases CVE-2009-3076
Summary Multiple vulnerabilities have been found in Mozilla Firefox, Thunderbird, SeaMonkey, NSS, GNU IceCat, and XULRunner, some of which may allow execution of arbitrary code or local privilege escalation.
Status Published
Exploitability 2.0
Weighted Severity 0.2
Risk 0.4
Affected and Fixed Packages Package Details
Weaknesses (0)
There are no known CWE.
System Score Found at
epss 0.17599 https://api.first.org/data/v1/epss?cve=CVE-2009-3076
epss 0.17599 https://api.first.org/data/v1/epss?cve=CVE-2009-3076
epss 0.17599 https://api.first.org/data/v1/epss?cve=CVE-2009-3076
epss 0.17599 https://api.first.org/data/v1/epss?cve=CVE-2009-3076
epss 0.17599 https://api.first.org/data/v1/epss?cve=CVE-2009-3076
epss 0.17599 https://api.first.org/data/v1/epss?cve=CVE-2009-3076
epss 0.17599 https://api.first.org/data/v1/epss?cve=CVE-2009-3076
epss 0.17599 https://api.first.org/data/v1/epss?cve=CVE-2009-3076
epss 0.17599 https://api.first.org/data/v1/epss?cve=CVE-2009-3076
generic_textual none https://www.mozilla.org/en-US/security/advisories/mfsa2009-48
Reference id Reference type URL
https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2009-3076.json
https://api.first.org/data/v1/epss?cve=CVE-2009-3076
521692 https://bugzilla.redhat.com/show_bug.cgi?id=521692
CVE-2009-3076 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-3076
CVE-2009-3076;OSVDB-57977 Exploit https://gitlab.com/exploit-database/exploitdb/-/blob/main/exploits/multiple/remote/9651.txt
GLSA-201301-01 https://security.gentoo.org/glsa/201301-01
mfsa2009-48 https://www.mozilla.org/en-US/security/advisories/mfsa2009-48
RHSA-2009:1430 https://access.redhat.com/errata/RHSA-2009:1430
RHSA-2009:1431 https://access.redhat.com/errata/RHSA-2009:1431
RHSA-2009:1432 https://access.redhat.com/errata/RHSA-2009:1432
RHSA-2010:0153 https://access.redhat.com/errata/RHSA-2010:0153
RHSA-2010:0154 https://access.redhat.com/errata/RHSA-2010:0154
USN-821-1 https://usn.ubuntu.com/821-1/
Data source Exploit-DB
Date added Sept. 10, 2009
Description Mozilla Firefox < 3.0.14 - Multiplatform Remote Code Execution via pkcs11.addmodule
Ransomware campaign use Known
Source publication date Sept. 11, 2009
Exploit type remote
Platform multiple
Exploit Prediction Scoring System (EPSS)
Percentile 0.95059
EPSS Score 0.17599
Published At April 1, 2026, 12:55 p.m.
Date Actor Action Source VulnerableCode Version
2026-04-01T13:06:15.864877+00:00 Gentoo Importer Import https://security.gentoo.org/glsa/201301-01 38.0.0