Search for vulnerabilities
Vulnerability details: VCID-zx73-18cf-pkaw
Vulnerability ID VCID-zx73-18cf-pkaw
Aliases CVE-2016-2834
Summary Mozilla has updated the version of Network Security Services (NSS) library used in Firefox to NSS 3.23. This addresses four moderate rated networking security issues reported by Mozilla engineers Tyson Smith and Jed Davis.
Status Published
Exploitability 0.5
Weighted Severity 2.5
Risk 1.2
Affected and Fixed Packages Package Details
Weaknesses (0)
There are no known CWE.
System Score Found at
epss 0.01552 https://api.first.org/data/v1/epss?cve=CVE-2016-2834
epss 0.01552 https://api.first.org/data/v1/epss?cve=CVE-2016-2834
epss 0.01552 https://api.first.org/data/v1/epss?cve=CVE-2016-2834
epss 0.01552 https://api.first.org/data/v1/epss?cve=CVE-2016-2834
epss 0.01552 https://api.first.org/data/v1/epss?cve=CVE-2016-2834
epss 0.01552 https://api.first.org/data/v1/epss?cve=CVE-2016-2834
epss 0.01552 https://api.first.org/data/v1/epss?cve=CVE-2016-2834
epss 0.01552 https://api.first.org/data/v1/epss?cve=CVE-2016-2834
epss 0.01552 https://api.first.org/data/v1/epss?cve=CVE-2016-2834
epss 0.01552 https://api.first.org/data/v1/epss?cve=CVE-2016-2834
epss 0.01552 https://api.first.org/data/v1/epss?cve=CVE-2016-2834
epss 0.01552 https://api.first.org/data/v1/epss?cve=CVE-2016-2834
epss 0.01552 https://api.first.org/data/v1/epss?cve=CVE-2016-2834
epss 0.01552 https://api.first.org/data/v1/epss?cve=CVE-2016-2834
epss 0.01552 https://api.first.org/data/v1/epss?cve=CVE-2016-2834
epss 0.01552 https://api.first.org/data/v1/epss?cve=CVE-2016-2834
epss 0.01552 https://api.first.org/data/v1/epss?cve=CVE-2016-2834
cvssv2 5.1 https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
generic_textual none https://www.mozilla.org/en-US/security/advisories/mfsa2016-61
Reference id Reference type URL
https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-2834.json
https://api.first.org/data/v1/epss?cve=CVE-2016-2834
https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
1347908 https://bugzilla.redhat.com/show_bug.cgi?id=1347908
CVE-2016-2834 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2834
mfsa2016-61 https://www.mozilla.org/en-US/security/advisories/mfsa2016-61
RHSA-2016:2779 https://access.redhat.com/errata/RHSA-2016:2779
USN-2993-1 https://usn.ubuntu.com/2993-1/
USN-3029-1 https://usn.ubuntu.com/3029-1/
No exploits are available.
Vector: AV:N/AC:H/Au:N/C:P/I:P/A:P Found at https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
Exploitability (E) Access Vector (AV) Access Complexity (AC) Authentication (Au) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

high

functional

unproven

proof_of_concept

not_defined

local

adjacent_network

network

high

medium

low

multiple

single

none

none

partial

complete

none

partial

complete

none

partial

complete
Exploit Prediction Scoring System (EPSS)
Percentile 0.80665
EPSS Score 0.01552
Published At July 30, 2025, 12:55 p.m.
Date Actor Action Source VulnerableCode Version
2025-07-31T08:10:11.252428+00:00 Mozilla Importer Import https://github.com/mozilla/foundation-security-advisories/blob/master/announce/2016/mfsa2016-61.md 37.0.0