TI-2023-23090 CVE-2023-43090 · GHSA-6wp3-hhxh-4vfp
Gnome-shell: screenshot tool allows viewing open windows when session is locked
Priority LOW 25
A vulnerability was found in GNOME Shell.
Vulnerabilities
11 records
TI-2021-02879 CVE-2021-3982 · GHSA-w69m-w3gr-72pp
Linux distributions using CAP_SYS_NICE for gnome-shell may be exposed to a privilege…
Priority LOW 25
Linux distributions using CAP_SYS_NICE for gnome-shell may be exposed to a privilege escalation issue.
TI-2021-03604 CVE-2021-20315 · GHSA-hpr5-wwh9-pjhf
A locking protection bypass flaw was found in some versions of gnome-shell as shipped…
Priority LOW 27
A locking protection bypass flaw was found in some versions of gnome-shell as shipped within CentOS Stream 8, when the "Application menu" or "Window list" GNOME extensions are enabled.
TI-2020-13244 CVE-2020-17489 · GHSA-vfpj-rcwj-86vm
An issue was discovered in certain configurations of GNOME gnome-shell through 3.36.4.
Priority LOW 21
An issue was discovered in certain configurations of GNOME gnome-shell through 3.36.4.
TI-2019-02832 CVE-2019-3820 · GHSA-jh4v-7q79-jf56
Improper authorization in gnome-shell
Priority LOW 21
It was discovered that the gnome-shell lock screen since version 3.15.91 did not properly restrict all contextual actions.
TI-2017-05858 CVE-2017-8288 · GHSA-rqjp-x4m8-wvwq
gnome-shell 3.22 through 3.24.1 mishandles extensions that fail to reload, which can lead…
Priority MEDIUM 41
gnome-shell 3.22 through 3.24.1 mishandles extensions that fail to reload, which can lead to leaving extensions enabled in the lock screen.
TI-2014-06083 CVE-2014-7300 · GHSA-gg6w-rmxx-j7xr
GNOME Shell 3.14.x before 3.14.1, when the Screen Lock feature is used, does not limit…
Priority LOW 32
GNOME Shell 3.14.x before 3.14.1, when the Screen Lock feature is used, does not limit the aggregate memory consumption of all active PrtSc requests, which allows physically proximate attackers to execute arbitrary comma…
TI-2013-05897 CVE-2013-7221 · GHSA-2fwf-gr55-x95r
The automatic screen lock functionality in GNOME Shell (aka gnome-shell) before 3.10 does…
Priority LOW 21
The automatic screen lock functionality in GNOME Shell (aka gnome-shell) before 3.10 does not prevent access to the "Enter a Command" dialog, which allows physically proximate attackers to execute arbitrary commands by l…
TI-2013-05896 CVE-2013-7220 · GHSA-9965-5x5j-j3rf
js/ui/screenShield.js in GNOME Shell (aka gnome-shell) before 3.8 allows physically…
Priority LOW 21
js/ui/screenShield.js in GNOME Shell (aka gnome-shell) before 3.8 allows physically proximate attackers to execute arbitrary commands by leveraging an unattended workstation with the keyboard focus on the Activities sear…
TI-2012-03769 CVE-2012-4427 · GHSA-gxj3-vwm6-2f7w
The gnome-shell plugin 3.4.1 in GNOME allows remote attackers to force the download and…
Priority LOW 33
The gnome-shell plugin 3.4.1 in GNOME allows remote attackers to force the download and installation of arbitrary extensions from extensions.gnome.org via a crafted web page.
TI-2010-03796 CVE-2010-4000 · GHSA-gm3m-g83g-8676
gnome-shell in GNOME Shell 2.31.5 places a zero-length directory name in the…
Priority LOW 30
gnome-shell in GNOME Shell 2.31.5 places a zero-length directory name in the LD_LIBRARY_PATH, which allows local users to gain privileges via a Trojan horse shared library in the current working directory.