CVE-2015-3278: Nss Compat Ossl Project Nss Compat Ossl

Critical severity, CVSS 9.8. EPSS: 1.5% chance of exploitation in the next 30 days.

The cipherstring parsing code in nss_compat_ossl while in multi-keyword mode does not match the expected set of ciphers for a given cipher combination, which allows attackers to have unspecified impact via unknown vectors.

Affected products

• Nss Compat Ossl Project Nss Compat Ossl: affected versions not specified

Published 2017-07-25. Last modified 2026-06-17.