GNOME vulnerabilities

CVEs per yearBy the year they were published

1. 20172
2. 20182
3. 20192
4. 20203
5. 20221
6. 20241
7. 20256
8. 202646

Newest CVEs

• CVE-2026-118599

  epiphany: TAR-based .xpi with hard links can overwrite user files during WebExtension install

  GNOME · Epiphany

  Medium5.5
• CVE-2026-118598

  epiphany: clipboard/website-data permission prompt incorrectly grants camera and microphone access

  GNOME · Epiphany

  Medium6.5
• CVE-2026-115683

  epiphany: TLS certificate warning bypass via race in tlsErrorPage message handler

  GNOME · Epiphany

  Medium6.8
• CVE-2026-116124

  GNOME libgsf OLE2 gsf-infile-msole.c ole_info_read_metabat heap-based overflow

  GNOME · libgsf

  Medium5.3
• CVE-2026-111132

  GNOME libgxps through 0.3.2 Heap Out-of-Bounds Read via path_geometry_start_element

  GNOME · libgxps

  Medium6.9
• CVE-2026-110777

  Evolution-data-server: local file disclosure via attach file:// uris

  GNOME · evolution-data-server

  Medium5.7
• CVE-2026-91841

  Networkmanager-vpnc: networkmanager-vpnc: incomplete fix for cve-2018-10900 allows root privilege escalation via ca-file path newline injection

  GNOME · NetworkManager-vpnc

  High7.8
• CVE-2026-91840

  Networkmanager-vpnc: networkmanager-vpnc: local privilege escalation to root via newline injection in vpn username

  GNOME · NetworkManager-vpnc

  High7.8
• CVE-2026-91839

  Networkmanager-fortisslvpn: networkmanager-fortisslvpn: local privilege escalation to root via crlf injection in vpn profile credentials

  GNOME · NetworkManager-fortisslvpn

  High7.8
• CVE-2026-91838

  Networkmanager-sstp: networkmanager-sstp: local privilege escalation to root via shell injection in vpn profile fields

  GNOME · NetworkManager-sstp

  High7.8