Vulnerabilidades em GNOME
63 resultadosAnálise Vexday
O GNOME apresenta 26 CVEs registradas, com 11 publicadas nos últimos 90 dias, indicando atividade contínua de descoberta de vulnerabilidades. Nenhuma vulnerabilidade está sob exploração ativa (KEV), e apenas 1 é crítica, sugerindo risco moderado no momento. A fraqueza dominante (CWE-416 - use-after-free) representa o principal vetor técnico, típico de problemas de segurança em aplicações desktop com ciclo de vida de objetos complexo.
CVE-2026-58010MEDIUMGlib: buffer over-read in glib/gvariant-serialiser.c via gvs_tuple_is_normal()EPSS 0.5%CVE-2026-58012MEDIUMGlib: buffer over-read in g_regex_replace() via glib/gregex.c:string_append() and g_utf8_next_char()EPSS 0.5%CVE-2026-58011MEDIUMGlib: out-of-bounds read in glib/gdatetime.c:g_date_time_get_ymd via invalid gdatetimeEPSS 0.5%CVE-2026-118598MEDIUMepiphany: clipboard/website-data permission prompt incorrectly grants camera and microphone accessEPSS 0.5%CVE-2025-12105HIGHLibsoup: heap use-after-free in libsoup message queue handling during http/2 read completionEPSS 0.5%CVE-2020-37011HIGHGnome Fonts Viewer 3.34.0 Heap CorruptionEPSS 0.4%CVE-2025-7425HIGHLibxslt: libxml2: heap use-after-free in libxslt caused by atype corruption in xmlattrptrEPSS 0.4%CVE-2026-16615MEDIUMLibrest: weak random number generation in pkce implementationEPSS 0.4%CVE-2026-116124MEDIUMGNOME libgsf OLE2 gsf-infile-msole.c ole_info_read_metabat heap-based overflowEPSS 0.4%CVE-2026-16768MEDIUMGdk-pixbuf: out-of-bounds read in ico parserEPSS 0.4%CVE-2017-12164MEDIUMA flaw was discovered in gdm 3.24.1 where gdm greeter was no longer setting the ran_once boolean during autologin. If autologin was enabled EPSS 0.4%CVE-2026-110777MEDIUMEvolution-data-server: local file disclosure via attach file:// urisEPSS 0.4%CVE-2026-6653HIGHlibxml2: Use after free in xmlParseInternalSubset via improper entity resolution handlingEPSS 0.4%CVE-2026-18487MEDIUMEpiphany: address bar / host spoofing via userinfo in ephy_uri_get_decoded_host()EPSS 0.3%CVE-2026-66759HIGHGimp: out-of-bounds read in file-icns plugin causes information disclosure or crash on crafted icns imagesEPSS 0.3%CVE-2026-84269MEDIUMGvfs: afp: heap-based buffer overflow in dsi read pathEPSS 0.3%CVE-2026-66758HIGHGimp: integer overflow in file-fits plugin causes a heap-based buffer overflow on crafted fits imagesEPSS 0.3%CVE-2026-78465HIGHGimp: integer overflow in pcx loader (planes=4) leads to heap overflow on 32-bitEPSS 0.3%CVE-2026-2604MEDIUMEvolution-data-server: evolution data server: arbitrary file deletion via inconsistent uri handlingEPSS 0.3%CVE-2026-79902MEDIUMGimp: stack vla size underflow denial of service in seattleEPSS 0.3%