GNOME

Products

Exploited and recent CVEs

• CVE-2026-118599 Medium 5.5 epiphany: TAR-based .xpi with hard links can overwrite user files during WebExtension install 0.2%
• CVE-2026-118598 Medium 6.5 epiphany: clipboard/website-data permission prompt incorrectly grants camera and microphone access 0.5%
• CVE-2026-115683 Medium 6.8 epiphany: TLS certificate warning bypass via race in tlsErrorPage message handler 0.2%
• CVE-2026-116124 Medium 6.3 GNOME libgsf OLE2 gsf-infile-msole.c ole_info_read_metabat heap-based overflow 0.4%
• CVE-2026-111132 Medium 6.1 GNOME libgxps through 0.3.2 Heap Out-of-Bounds Read via path_geometry_start_element 0.1%
• CVE-2026-110777 Medium 5.7 Evolution-data-server: local file disclosure via attach file:// uris 0.4%
• CVE-2026-91841 High 7.8 Networkmanager-vpnc: networkmanager-vpnc: incomplete fix for cve-2018-10900 allows root privilege escalation via ca-file path newline injection 0.2%
• CVE-2026-91840 High 7.8 Networkmanager-vpnc: networkmanager-vpnc: local privilege escalation to root via newline injection in vpn username 0.2%
• CVE-2026-91839 High 7.8 Networkmanager-fortisslvpn: networkmanager-fortisslvpn: local privilege escalation to root via crlf injection in vpn profile credentials 0.2%
• CVE-2026-91838 High 7.8 Networkmanager-sstp: networkmanager-sstp: local privilege escalation to root via shell injection in vpn profile fields 0.1%
• CVE-2026-91837 High 7.8 Networkmanager-iodine: networkmanager-iodine: local privilege escalation to root via nameserver option injection 0.1%
• CVE-2026-97222 Medium 5.5 Gnumeric: gnumeric: heap use-after-free when opening a malformed workbook 0.1%
• CVE-2026-92248 High 7.8 Gimp: integer overflow when generating a thumbnail preview for a psd file 0.2%
• CVE-2026-88924 High 7.0 Gvfs: gvfs-admin socket ownership race permits local root 0.2%
• CVE-2026-84270 Medium 4.3 Gvfs: mtp: out-of-bounds read in do_read() 0.1%
• CVE-2026-84269 Medium 6.5 Gvfs: afp: heap-based buffer overflow in dsi read path 0.3%
• CVE-2026-84267 Medium 4.3 Gvfs: sftp: uninitialized heap disclosure in read_string() 0.2%
• CVE-2026-84268 High 8.8 Gvfs: sftp: heap-based buffer overflow in read_reply() 0.6%
• CVE-2026-82343 Medium 6.1 Gimp: heap out-of-bounds read and stack out-of-bounds access in psd loader from channel-count handling 0.2%
• CVE-2026-82330 Medium 6.1 Gimp: heap out-of-bounds read in pvr vq (compressed) decoder due to missing bounds check 0.3%
• CVE-2026-82328 Medium 6.1 Gimp: heap out-of-bounds read in ico loader via unvalidated used_clrs palette count 0.2%
• CVE-2026-82324 Medium 6.1 Gimp: heap out-of-bounds reads in iff/ilbm loader from ham row size mismatch and nplanes=0 0.2%
• CVE-2026-77652 High 7.8 Dia: dia: heap buffer overflow in wpg colormap parser via out-of-bounds palette index 0.2%
• CVE-2026-79902 Medium 5.5 Gimp: stack vla size underflow denial of service in seattle 0.3%
• CVE-2026-77658 High 7.8 Dia: dia: stack buffer overflow in bus object via unvalidated handle count in project files 0.2%
• CVE-2026-80101 Medium 4.4 Gimp: multiple heap out-of-bounds reads in xwd loader from unrelated width and bytes-per-line validation 0.2%
• CVE-2026-78475 Medium 6.1 Gimp: unbounded stack vla and 21-byte stack over-read in pix (esm) loader 0.3%
• CVE-2026-78465 High 7.0 Gimp: integer overflow in pcx loader (planes=4) leads to heap overflow on 32-bit 0.3%
• CVE-2026-18487 Medium 5.4 Epiphany: address bar / host spoofing via userinfo in ephy_uri_get_decoded_host() 0.3%
• CVE-2026-18358 High 7.5 Gnome-remote-desktop: gnome-remote-desktop system-mode rdp server missing connection throttling allows unauthenticated denial of service 0.7%