Skip to contentGnome vulnerabilities
Newest
- gnome glib, red hat enterprise linux 10, enterprise linux 6 +3 more +5 moreGlib: glib crash after long command lineCVE-2025-4056Fix available7.5 High
- gnome libxml2In libxml2 before 2.13.8 and 2.14.x before 2.14.2, xmlSchemaIDCFillNodeTables in xmlschemas.c has...CVE-2025-32415Fix available2.9 Low
- gnome libxml2In libxml2 before 2.13.8 and 2.14.x before 2.14.2, out-of-bounds memory access can occur in the...CVE-2025-32414Fix available5.6 Medium
- gnome yelp, debian linux, red hat enterprise linux 6 +33 more +35 moreYelp: arbitrary file readCVE-2025-3155Fix availableEPSS 13.1%7.4 High
- gnome libsoup, red hat enterprise linux 10, enterprise linux 6 +32 more +34 moreLibsoup: heap buffer over-read in `skip_insignificant_space` when sniffing contentCVE-2025-2784Fix available7.0 High
- gnome libxsltnumbers.c in libxslt before 1.1.43 has a use-after-free because, in nested XPath evaluations, an...CVE-2025-24855Fix available7.8 High
- gnome libxsltxsltGetInheritedNsList in libxslt before 1.1.43 has a use-after-free issue related to exclusion...CVE-2024-55549Fix available7.8 High
- gnome libxml2libxml2 before 2.12.10 and 2.13.x before 2.13.6 has a NULL pointer dereference in xmlPatMatch in...CVE-2025-27113Fix available2.9 Low
- gnome libxml2, netapp active iq unified manager, h300s firmware +8 more +10 morelibxml2 before 2.12.10 and 2.13.x before 2.13.6 has a stack-based buffer overflow in...CVE-2025-24928Fix available7.8 High
- gnome libxml2, netapp active iq unified manager, h300s firmware +8 more +10 morelibxml2 before 2.12.10 and 2.13.x before 2.13.6 has a use-after-free in...CVE-2024-56171Fix available7.8 High
- gnome libxml2xmlXIncludeAddNode in xinclude.c in libxml2 before 2.11.0 has a use-after-free.CVE-2022-49043Fix available8.1 High
- gnome gnome-maps, gnome maps maps +1 moreGnome-maps: gnome maps is vulnerable to a code injection attack (similar to xss) via its service.jsonCVE-2023-43091Fix available9.8 Critical
- gnome glib, debian linux, netapp active iq unified manager +31 more +33 moregio/gsocks4aproxy.c in GNOME GLib before 2.82.1 has an off-by-one error and resultant buffer...CVE-2024-52533Fix available9.8 Critical
- gnome libsoupGNOME libsoup before 3.6.1 has an infinite loop, and memory consumption. during the reading of...CVE-2024-52532Fix available7.5 High
- gnome libsoupGNOME libsoup before 3.6.1 allows a buffer overflow in applications that perform conversion to...CVE-2024-52531Fix available6.5 Medium
- gnome libsoupGNOME libsoup before 3.6.0 allows HTTP request smuggling in some configurations because '\0'...CVE-2024-52530Fix available7.5 High
- gnome libgsf, gnome project g structured file library (libgsf) +1 moreAn integer overflow vulnerability exists in the Compound Document Binary File format parser of v1...CVE-2024-42415Fix available8.4 High
- gnome libgsf, gnome project g structured file library (libgsf) +1 moreAn integer overflow vulnerability exists in the Compound Document Binary File format parser of...CVE-2024-36474Fix available8.4 High
- gnome libxml2, netapp h300s firmware, h410c firmware +6 more +8 moreIn libxml2 2.11 before 2.11.9, 2.12 before 2.12.9, and 2.13 before 2.13.3, the SAX parser can...CVE-2024-40896Fix available9.1 Critical
- gnome glib, debian linux, fedoraproject fedora +7 more +9 moreAn issue was discovered in GNOME GLib before 2.78.5, and 2.79.x and 2.80.x before 2.80.1. When a...CVE-2024-34397Fix available5.2 Medium
- gnome gladeplugins/gtk+/glade-gtk-box.c in GNOME Glade before 3.38.1 and 3.39.x before 3.40.0 mishandles...CVE-2020-36774Fix available5.5 Medium
- gnome gdkpixbufIn GNOME GdkPixbuf (aka gdk-pixbuf) through 2.42.10, the ANI (Windows animated cursor) decoder...CVE-2022-48622Fix available7.8 High
- canonical ubuntu linux, canonical ltd. ubuntu's gnome-control-center, gnome control center +2 moreIn Ubuntu, gnome-control-center did not properly reflect SSH remote login status when the system...CVE-2023-5616Fix available4.9 Medium
- gnome tracker miners, red hat enterprise linux 7, enterprise linux 8 +12 more +14 moreTracker-miners: sandbox escapeCVE-2023-5557Fix available7.5 High
- gnome gnome-shell, fedoraproject fedora +1 moreGnome-shell: screenshot tool allows viewing open windows when session is lockedCVE-2023-43090Fix available5.5 Medium
- gnome gnome-time trackerCSV Injection vulnerability in GNOME time tracker version 3.0.2, allows local attackers to...CVE-2023-36250Public exploit7.8 High
- gnome librsvg, debian linux, fedoraproject fedora +2 moreA directory traversal problem in the URL decoder of librsvg before 2.56.3 could be used by local...CVE-2023-38633Fix available5.5 Medium
- gnome glib, fedora extra packages for enterprise linux, fedora +9 more +11 moreGvariant deserialisation does not match spec for non-normal dataCVE-2023-32665Fix available5.5 Medium
- glib, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp, simatic s7-1500 cpu 1518f-4 pn/dp mfp +1 more +3 moreA flaw was found in GLib. The GVariant deserialization code is vulnerable to a heap buffer...CVE-2023-32643Fix available5.3 Medium
- glib, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp, simatic s7-1500 cpu 1518f-4 pn/dp mfp +1 more +3 moreA flaw was found in glib, where the gvariant deserialization code is vulnerable to a denial of...CVE-2023-32636Fix available4.7 Medium
- gnome glib, fedora extra packages for enterprise linux, 37 +8 more +10 moreG_variant_byteswap() can take a long time with some non-normal inputsCVE-2023-32611Fix available5.5 Medium
- gnome glib, fedora extra packages for enterprise linux, 37 +8 more +10 moreGvariant offset table entry size is not checked in is_normal()CVE-2023-29499Fix available5.5 Medium
- gnome epiphany, fedoraproject fedora +1 moreIn Epiphany (aka GNOME Web) through 43.0, untrusted web content can trick users into exfiltrating...CVE-2023-26081Fix available7.5 High
- gnome gvdb, gvariant database +1 moreGNOME gvdb gvdb-builder.c gvdb_table_write_contents_async use after freeCVE-2019-25085Fix available6.3 Medium
- gnome nautilus, fedoraproject fedora +1 moreGNOME Nautilus 42.2 allows a NULL pointer dereference and get_basename application crash via a...CVE-2022-37290Fix available5.5 Medium
- gnome anjutaThere is a Information Disclosure vulnerability in anjuta/plugins/document-manager/anjuta...CVE-2021-425227.5 High
- gnome libxml2, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp, simatic s7-1500 cpu 1518f-4 pn/dp mfp +1 more +3 morePossible cross-site scripting vulnerability in libxml after commit 960f0e2.CVE-2016-3709Fix available6.1 Medium
- gnome gdk-pixbuf, debian linux, fedoraproject fedora +2 moreGNOME GdkPixbuf (aka GDK-PixBuf) before 2.42.8 allows a heap-based buffer overflow when...CVE-2021-46829Fix available7.8 High
- canonical ubuntu linux, canonical ltd. ubuntu's gnome-control-center, gnome gnome-remote-desktop +2 moreUbuntu's configuration of gnome-control-center allowed Remote Desktop Sharing to be enabled by...CVE-2022-1736Fix available9.8 Critical
- gnome epiphany, debian linux, fedoraproject fedora +2 moreIn GNOME Epiphany before 41.4 and 42.x before 42.2, an HTML document can trigger a client buffer...CVE-2022-29536Fix available7.5 High
- gnome ocrfeederGNOME OCRFeeder before 0.8.4 allows OS command injection via shell metacharacters in a PDF or...CVE-2022-27811Fix available9.8 Critical
- centos stream, gnome gnome-shell +1 moreA locking protection bypass flaw was found in some versions of gnome-shell as shipped within...CVE-2021-203156.1 Medium
- debian linux, fedoraproject fedora, gnome gdkpixbuf +2 moreGNOME gdk-pixbuf 2.42.6 is vulnerable to a heap-buffer overflow vulnerability when decoding the...CVE-2021-44648Fix available8.8 High
- gnome gnome-shellLinux distributions using CAP_SYS_NICE for gnome-shell may be exposed to a privilege escalation...CVE-2021-3982Fix available5.5 Medium
- gnome epiphany, debian linux +1 moreXSS can occur in GNOME Web (aka Epiphany) before 40.4 and 41.x before 41.1 because a server's...CVE-2021-45086Fix available6.1 Medium
- gnome epiphany, debian linux +1 moreXSS can occur in GNOME Web (aka Epiphany) before 40.4 and 41.x before 41.1 when View Source mode...CVE-2021-45087Fix available6.1 Medium
- gnome epiphany, debian linux +1 moreXSS can occur in GNOME Web (aka Epiphany) before 40.4 and 41.x before 41.1 via an error page.CVE-2021-45088Fix available6.1 Medium
- gnome epiphany, debian linux +1 moreXSS can occur in GNOME Web (aka Epiphany) before 40.4 and 41.x before 41.1 via an about: page, as...CVE-2021-45085Fix available6.1 Medium
- gnome glib, debian linux, netapp active iq unified manager +2 moreA flaw was found in glib before version 2.63.6. Due to random charset alias, pkexec can leak...CVE-2021-3800Fix available5.5 Medium
- gnome grilo, debian linux +1 moreIn GNOME grilo though 0.3.13, grl-net-wc.c does not enable TLS certificate verification on the...CVE-2021-39365Fix available5.9 Medium
- Show moreLoading…