Browse all 59 CVE security advisories affecting Gnome. AI-powered Chinese analysis, POCs, and references for each vulnerability.
GNOME serves as a default desktop environment for Linux distributions, providing a user interface for system interaction. Historically, it has faced vulnerabilities across multiple classes, including remote code execution, cross-site scripting, and privilege escalation, with 17 CVEs documented. Security concerns have often centered on components like GNOME Shell and related utilities. Notable incidents include flaws in the Epiphany browser and Nautilus file manager that could lead to information disclosure or arbitrary code execution. The project has addressed these through regular updates, but the complexity of its ecosystem continues to present potential attack surfaces for malicious actors targeting Linux systems.
| CVE ID | Title | CVSS | Severity | Published |
|---|---|---|---|---|
| CVE-2026-88924 | Gvfs: gvfs-admin socket ownership race permits local root — gvfs CWE-367 | 7.0 | High | 2026-09-10 |
| CVE-2026-84270 | Gvfs: mtp: out-of-bounds read in do_read() — gvfs CWE-125 | 4.3 | Medium | 2026-09-01 |
| CVE-2026-84269 | Gvfs: afp: heap-based buffer overflow in dsi read path — gvfs CWE-122 | 6.5 | Medium | 2026-09-01 |
| CVE-2026-84267 | Gvfs: sftp: uninitialized heap disclosure in read_string() — gvfs CWE-908 | 4.3 | Medium | 2026-09-01 |
| CVE-2026-84268 | Gvfs: sftp: heap-based buffer overflow in read_reply() — gvfs CWE-122 | 8.8 | High | 2026-09-01 |
This page lists every published CVE security advisory associated with Gnome. Each entry links to a detailed page with CVSS scoring, CWE classification, affected products and references. AI-generated Chinese analysis is provided for fast triage.