Vulnerabilidades en GNOME
51 resultadosAnálisis Vexday
O GNOME apresenta 26 CVEs registradas, com 11 publicadas nos últimos 90 dias, indicando atividade contínua de descoberta de vulnerabilidades. Nenhuma vulnerabilidade está sob exploração ativa (KEV), e apenas 1 é crítica, sugerindo risco moderado no momento. A fraqueza dominante (CWE-416 - use-after-free) representa o principal vetor técnico, típico de problemas de segurança em aplicações desktop com ciclo de vida de objetos complexo.
CVE-2026-82330MEDIUMGimp: heap out-of-bounds read in pvr vq (compressed) decoder due to missing bounds checkEPSS 0.2%CVE-2026-82324MEDIUMGimp: heap out-of-bounds reads in iff/ilbm loader from ham row size mismatch and nplanes=0EPSS 0.2%CVE-2026-82328MEDIUMGimp: heap out-of-bounds read in ico loader via unvalidated used_clrs palette countEPSS 0.2%CVE-2026-78475MEDIUMGimp: unbounded stack vla and 21-byte stack over-read in pix (esm) loaderEPSS 0.2%CVE-2026-82343MEDIUMGimp: heap out-of-bounds read and stack out-of-bounds access in psd loader from channel-count handlingEPSS 0.2%CVE-2026-92248HIGHGimp: integer overflow when generating a thumbnail preview for a psd fileEPSS 0.2%CVE-2026-88924HIGHGvfs: gvfs-admin socket ownership race permits local rootEPSS 0.2%CVE-2026-77652HIGHDia: dia: heap buffer overflow in wpg colormap parser via out-of-bounds palette indexEPSS 0.2%CVE-2026-84270MEDIUMGvfs: mtp: out-of-bounds read in do_read()EPSS 0.1%CVE-2026-44931MEDIUMmalcontent: Disk Space Exhaustion via Globally Accessible D-Bus APIEPSS 0.1%CVE-2026-77658HIGHDia: dia: stack buffer overflow in bus object via unvalidated handle count in project filesEPSS 0.1%