Gnome Epiphany vulnerabilities

• gnome epiphany epiphany: TAR-based .xpi with hard links can overwrite user files during WebExtension install CVE-2026-118599 Fix available 5.5 MediumOctober 31, 2026
• gnome epiphany epiphany: clipboard/website-data permission prompt incorrectly grants camera and microphone access CVE-2026-118598 Fix available 6.5 MediumOctober 31, 2026
• gnome epiphany epiphany: TLS certificate warning bypass via race in tlsErrorPage message handler CVE-2026-115683 Fix available 6.8 MediumOctober 30, 2026
• gnome epiphany Epiphany: address bar / host spoofing via userinfo in ephy_uri_get_decoded_host() CVE-2026-18487 Fix available 5.4 MediumAugust 6, 2026
• gnome epiphany, fedoraproject fedora +1 more In Epiphany (aka GNOME Web) through 43.0, untrusted web content can trick users into exfiltrating... CVE-2023-26081 Fix available 7.5 HighFebruary 20, 2023
• gnome epiphany, debian linux, fedoraproject fedora +2 more In GNOME Epiphany before 41.4 and 42.x before 42.2, an HTML document can trigger a client buffer... CVE-2022-29536 Fix available 7.5 HighApril 20, 2022
• gnome epiphany, debian linux +1 more XSS can occur in GNOME Web (aka Epiphany) before 40.4 and 41.x before 41.1 because a server's... CVE-2021-45086 Fix available 6.1 MediumDecember 16, 2021
• gnome epiphany, debian linux +1 more XSS can occur in GNOME Web (aka Epiphany) before 40.4 and 41.x before 41.1 when View Source mode... CVE-2021-45087 Fix available 6.1 MediumDecember 16, 2021
• gnome epiphany, debian linux +1 more XSS can occur in GNOME Web (aka Epiphany) before 40.4 and 41.x before 41.1 via an error page. CVE-2021-45088 Fix available 6.1 MediumDecember 16, 2021
• gnome epiphany, debian linux +1 more XSS can occur in GNOME Web (aka Epiphany) before 40.4 and 41.x before 41.1 via an about: page, as... CVE-2021-45085 Fix available 6.1 MediumDecember 16, 2021
• webkitgtk, wpewebkit wpe webkit, canonical ubuntu linux +3 more +5 more WebKitGTK and WPE WebKit prior to version 2.24.1 are vulnerable to address bar spoofing upon... CVE-2019-6251 Fix available 8.1 HighJanuary 14, 2019
• gnome epiphany libephymain.so in GNOME Web (aka Epiphany) through 3.28.2.1 allows remote attackers to cause a... CVE-2018-12016 Fix available 7.5 HighJune 7, 2018
• gnome epiphany ephy-session.c in libephymain.so in GNOME Web (aka Epiphany) through 3.28.2.1 allows remote... CVE-2018-11396 Fix available 7.5 HighMay 23, 2018
• gnome epiphany GNOME Web (Epiphany) 3.23 before 3.23.5, 3.22 before 3.22.6, 3.20 before 3.20.7, 3.18 before 3.18... CVE-2017-1000025 Fix available 7.5 HighJuly 13, 2017
• gnome epiphany Epiphany 2.28 and 2.29, when WebKit and LibSoup are used, unconditionally displays a closed-lock... CVE-2010-3312 Fix available 5.8 MediumOctober 12, 2010
• gnome epiphany Untrusted search path vulnerability in the Python interface in Epiphany 2.22.3, and possibly... CVE-2008-5985 Fix available 6.9 MediumJanuary 28, 2009
• gnome epiphany, mozilla camino, mozilla +2 more +4 more The International Domain Name (IDN) support in Epiphany allows remote attackers to spoof domain... CVE-2005-0238 Fix available 5.0 MediumFebruary 7, 2005