GNOME gvfs
- CVE-2026-88924 Gvfs: gvfs-admin socket ownership race permits local root 0.2%
- CVE-2026-84270 Gvfs: mtp: out-of-bounds read in do_read() 0.1%
- CVE-2026-84269 Gvfs: afp: heap-based buffer overflow in dsi read path 0.3%
- CVE-2026-84267 Gvfs: sftp: uninitialized heap disclosure in read_string() 0.2%
- CVE-2026-84268 Gvfs: sftp: heap-based buffer overflow in read_reply() 0.6%