Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%
Buy Us a Coffee

Gnome — Vulnerabilities & Security Advisories 59

Browse all 59 CVE security advisories affecting Gnome. AI-powered Chinese analysis, POCs, and references for each vulnerability.

GNOME serves as a default desktop environment for Linux distributions, providing a user interface for system interaction. Historically, it has faced vulnerabilities across multiple classes, including remote code execution, cross-site scripting, and privilege escalation, with 17 CVEs documented. Security concerns have often centered on components like GNOME Shell and related utilities. Notable incidents include flaws in the Epiphany browser and Nautilus file manager that could lead to information disclosure or arbitrary code execution. The project has addressed these through regular updates, but the complexity of its ecosystem continues to present potential attack surfaces for malicious actors targeting Linux systems.

Top products by Gnome: GIMP glib gvfs Gdk-Pixbuf libsoup libxml2 NetworkManager-vpnc Dia Evolution Data Server NetworkManager-sstp NetworkManager-iodine NetworkManager-fortisslvpn Gnumeric evolution-data-server Epiphany gnome-remote-desktop libgxps librest Ekiga malcontent Fonts Viewer libxslt GDM3 gvdb Pango gdm Evolution NetworkManager
CVE ID Title CVSS Severity Published
CVE-2026-16615 Librest: weak random number generation in pkce implementation — librest CWE-338 6.8 Medium 2026-07-22
CVE-2026-58015 Glib: path traversal in glib/gio/gdbusauthmechanismsha1.c via keyring_lookup_entry and mechanism_client_data_receive — GLib CWE-22 5.9 Medium 2026-06-30
CVE-2026-58016 Glib: integer underflow in gio/gdbusintrospection.c via "g_dbus_node_info_new_for_xml" — GLib CWE-191 7.5 High 2026-06-30
CVE-2026-58014 Glib: off-by-one error in glib/gkeyfile.c via "g_key_file_get_locale_string_list" — GLib CWE-193 7.3 High 2026-06-30
CVE-2026-58013 Glib: buffer over-read in glib/giochannel.c via "g_io_channel_read_line_backend" — GLib CWE-126 6.5 Medium 2026-06-30
CVE-2026-58012 Glib: buffer over-read in g_regex_replace() via glib/gregex.c:string_append() and g_utf8_next_char() — GLib CWE-126 6.5 Medium 2026-06-30
CVE-2026-58010 Glib: buffer over-read in glib/gvariant-serialiser.c via gvs_tuple_is_normal() — GLib CWE-126 6.5 Medium 2026-06-30
CVE-2026-58011 Glib: out-of-bounds read in glib/gdatetime.c:g_date_time_get_ymd via invalid gdatetime — GLib CWE-125 6.5 Medium 2026-06-30
CVE-2026-6653 libxml2: Use after free in xmlParseInternalSubset via improper entity resolution handling — libxml2 CWE-416 - - 2026-06-22
CVE-2026-2604 Evolution-data-server: evolution data server: arbitrary file deletion via inconsistent uri handling — Evolution Data Server CWE-73 5.6 Medium 2026-06-16
CVE-2026-44931 malcontent: Disk Space Exhaustion via Globally Accessible D-Bus API — malcontent CWE-770 - - 2026-05-13
CVE-2020-37011 Gnome Fonts Viewer 3.34.0 Heap Corruption — Fonts Viewer CWE-787 7.5 High 2026-01-29
CVE-2025-14512 Glib: integer overflow in glib gio attribute escaping causes heap buffer overflow — glib CWE-190 6.5 Medium 2025-12-11
CVE-2025-14087 Glib: glib: buffer underflow in gvariant parser leads to heap corruption — glib CWE-190 5.6 Medium 2025-12-10
CVE-2025-12105 Libsoup: heap use-after-free in libsoup message queue handling during http/2 read completion — libsoup CWE-416 7.5 High 2025-10-23
CVE-2025-7424 Libxslt: type confusion in xmlnode.psvi between stylesheet and source nodes — libxslt CWE-843 7.5 High 2025-07-10
CVE-2025-7425 Libxslt: libxml2: heap use-after-free in libxslt caused by atype corruption in xmlattrptr — libxml2 CWE-416 7.8 High 2025-07-10
CVE-2025-49795 Libxml: null pointer dereference leads to denial of service (dos) — libxml2 CWE-825 7.5 High 2025-06-16
CVE-2024-52531 libsoup 安全漏洞 — libsoup CWE-787 6.5 Medium 2024-11-11
CVE-2019-25085 GNOME gvdb gvdb-builder.c gvdb_table_write_contents_async use after free — gvdb CWE-416 6.3 Medium 2022-12-26
CVE-2020-16125 gdm3 would start gnome-initial-setup if it cannot contact accountservice — GDM3 CWE-754 7.2 High 2020-11-10
CVE-2012-1096 NetworkManager 信任管理问题漏洞 — NetworkManager 5.5 - 2020-03-10
CVE-2013-4166 GNOME Evolution 信息泄露漏洞 — Evolution 7.5 - 2020-02-06
CVE-2019-1010238 Gnome Pango 缓冲区错误漏洞 — Pango 9.8 - 2019-07-19
CVE-2011-1830 Ekiga attempts to dlopen /tmp/ekiga_test.so — Ekiga 7.8 - 2019-04-22
CVE-2017-12164 GDM 安全漏洞 — gdm CWE-592 6.4 - 2018-07-26
CVE-2017-2885 GNOME libsoup 缓冲区错误漏洞 — libsoup 9.8 - 2018-04-24
CVE-2017-2870 Gdk-Pixbuf 数字错误漏洞 — Gdk-Pixbuf 7.8 - 2017-09-05
CVE-2017-2862 Gdk-Pixbuf 缓冲区错误漏洞 — Gdk-Pixbuf 7.8 - 2017-09-05

This page lists every published CVE security advisory associated with Gnome. Each entry links to a detailed page with CVSS scoring, CWE classification, affected products and references. AI-generated Chinese analysis is provided for fast triage.