A vulnerability, which was classified as critical, was found in Mozilla Firefox up to 67.x. Affected is an unknown function of the component Network Security Services. The manipulation leads to improper certificate validation.
This vulnerability is traded as CVE-2019-11727. It is possible to launch the attack remotely. There is no exploit available.
It is recommended to upgrade the affected component.
A vulnerability classified as problematic has been found in Mbed TLS up to 2.28.9/3.6.2. This affects the function mbedtls_ssl_set_hostname. The manipulation of the argument Hostname leads to insecure default initialization of resource.
This vulnerability is uniquely identified as CVE-2025-27809. It is possible to initiate the attack remotely. There is no exploit available.
It is recommended to upgrade the affected component.