Vulnerabilities

TI-2026-83539 CVE-2026-118599 · GHSA-h27g-h5mg-6hm2

Hard-link handling in Epiphany lets crafted .xpi overwrite user files

LOW 24

A file overwrite vulnerability exists in Epiphany when installing WebExtension packages from .xpi files.

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.00182 Published 2026-10-31 No fix listed CWE-59

TI-2026-83538 CVE-2026-118598 · GHSA-pv7g-824r-3xmg

Epiphany grants camera and microphone access after clipboard prompt

LOW 29

A logic error in Epiphany's site permission handling can cause camera and microphone access to be granted when the user only approves a different permission.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.00469 Published 2026-10-31 No fix listed CWE-863

TI-2026-83097 CVE-2026-115683 · GHSA-rgq4-6fxx-v9rg

Race in Epiphany lets websites bypass TLS certificate warnings

HIGH 65

A race condition in Epiphany allows a malicious website to bypass the TLS/SSL certificate warning page.

CVSS 3.1MEDIUM 6.8 Network No auth User interaction EPSS 0.0022 Published 2026-10-30 Fixed in 51.1 CWE-367

TI-2026-80263 CVE-2026-116124 · GHSA-gmh9-5j2c-j4q8

Heap-based buffer overflow in GNOME libgsf OLE2 parser

LOW 24

A security vulnerability has been detected in GNOME libgsf up to 1.14.60.

CVSS 4.0MEDIUM 5.3 Network No auth User interaction EPSS 0.00426 Published 2026-10-26 No fix listed CWE-119

TI-2026-74916 CVE-2026-111132

Heap out-of-bounds read in GNOME libgxps path parsing

LOW 29

GNOME libgxps through 0.3.2 contains a heap out-of-bounds read in path_geometry_start_element() that allows attackers to read past allocations via crafted PolyBezierSegment or PolyQuadraticBezierSegment Points attributes…

CVSS 4.0MEDIUM 6.9 Local No auth User interaction EPSS 0.00127 Published 2026-10-15 Fix deferred CWE-125

TI-2026-74372 CVE-2026-110777

File disclosure in evolution-data-server via calendar ATTACH URIs

LOW 26

A flaw was found in evolution-data-server.

CVSS 3.1MEDIUM 5.7 Network Low privileges User interaction EPSS 0.00381 Published 2026-10-14 Partial fix · 3.62.1 CWE-200

TI-2026-65425 CVE-2026-102560 · GHSA-9v45-6jmj-gmwr

Libsoup: libsoup: heap buffer overflow during outgoing permessage-deflate buffer growth

MEDIUM 49

A flaw was found in libsoup.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00521 Published 2026-09-29 Partial fix · 3.6.5-3.el10_2.20, 3.6.5-3.el10_0.19 +4 CWE-125

TI-2026-65424 CVE-2026-102559 · GHSA-cj4p-f4hv-cp74

Libsoup: libsoup: heap buffer overflow during websocket client-frame masking

MEDIUM 44

A flaw was found in libsoup.

CVSS 3.1HIGH 8.6 Network No auth No interaction EPSS 0.00625 Published 2026-09-29 Partial fix · 3.6.5-3.el10_2.20, 3.6.5-3.el10_0.19 +9 CWE-125

TI-2026-65423 CVE-2026-102558 · GHSA-xxgh-qh6h-jxc2

Libsoup: libsoup: heap buffer overflow during websocket receive-buffer growth

MEDIUM 44

A flaw was found in libsoup.

CVSS 3.1HIGH 8.6 Network No auth No interaction EPSS 0.00596 Published 2026-09-29 Partial fix · 3.6.5-3.el10_2.20, 3.6.5-3.el10_0.19 +9 CWE-125

TI-2026-65420 CVE-2026-102555 · GHSA-vfxx-hcqj-vrh4

Libsoup: libsoup: heap buffer overflow via uninitialized length in data-uri base64 decoding

MEDIUM 42

A flaw was found in libsoup.

CVSS 3.1HIGH 8.2 Network No auth No interaction EPSS 0.00479 Published 2026-09-29 Partial fix · 3.6.5-3.el10_2.20, 3.6.5-3.el10_0.19 CWE-125

TI-2026-65422 CVE-2026-102557 · GHSA-fc8r-xmg7-v58h

Libsoup: libsoup: heap buffer overflow during websocket message reassembly

MEDIUM 44

A flaw was found in libsoup.

CVSS 3.1HIGH 8.6 Network No auth No interaction EPSS 0.00467 Published 2026-09-29 Partial fix · 3.6.5-3.el10_2.20, 3.6.5-3.el10_0.19 +9 CWE-125

TI-2026-65421 CVE-2026-102556 · GHSA-q4x2-vf8m-46j5

Libsoup: libsoup: heap buffer overflow from websocket pong signal type confusion

MEDIUM 44

A flaw was found in libsoup.

CVSS 3.1HIGH 8.6 Network No auth No interaction EPSS 0.00467 Published 2026-09-29 Partial fix · 3.6.5-3.el10_2.20, 3.6.5-3.el10_0.19 +9 CWE-843

TI-2026-62037 CVE-2026-91841 · GHSA-w3p6-vc7r-vcv4

Networkmanager-vpnc: networkmanager-vpnc: incomplete fix for cve-2018-10900 allows root…

LOW 35

A flaw was found in NetworkManager-vpnc, a VPN plugin for NetworkManager.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00194 Published 2026-09-25 No fix listed CWE-93

TI-2026-62036 CVE-2026-91840 · GHSA-p2g6-ffcc-pqqv

Networkmanager-vpnc: networkmanager-vpnc: local privilege escalation to root via newline injection in vpn username

LOW 35

A flaw was found in NetworkManager-vpnc.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00193 Published 2026-09-25 No fix listed CWE-93

TI-2026-62035 CVE-2026-91839 · GHSA-vr82-qjvf-9rrq

Networkmanager-fortisslvpn: networkmanager-fortisslvpn: local privilege escalation to…

LOW 35

A flaw was found in NetworkManager-fortisslvpn, the FortiSSLVPN plugin for NetworkManager.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00204 Published 2026-09-25 No fix listed CWE-93

TI-2026-62034 CVE-2026-91838 · GHSA-94qh-3pf4-8c4r

Networkmanager-sstp: networkmanager-sstp: local privilege escalation to root via shell injection in vpn profile fields

LOW 35

A flaw was found in NetworkManager-sstp, the SSTP VPN plugin for NetworkManager.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.001 Published 2026-09-25 No fix listed CWE-78

TI-2026-62033 CVE-2026-91837 · GHSA-hrpv-95c6-mpj2

Networkmanager-iodine: networkmanager-iodine: local privilege escalation to root via nameserver option injection

LOW 35

A flaw was found in NetworkManager-iodine, the iodine VPN plugin for NetworkManager.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00136 Published 2026-09-25 No fix listed CWE-78

TI-2026-63966 CVE-2026-97222 · GHSA-gx2p-wmmc-xm83

Gnumeric: gnumeric: heap use-after-free when opening a malformed workbook

LOW 24

A heap use-after-free flaw was found in Gnumeric.

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.00117 Published 2026-09-25 Fixed CWE-416

TI-2026-62277 CVE-2026-92248 · GHSA-v7fc-wcg3-84gx

Gimp: integer overflow when generating a thumbnail preview for a psd file

LOW 35

A flaw was found in the file-psd plugin in GIMP.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00187 Published 2026-09-15 Partial fix · 8100020261015094823.4c9c024f, 2:3.0.4-4.el9_8.14 +1 CWE-190

TI-2026-60294 CVE-2026-88924 · GHSA-8w8m-36rw-gg63

Gvfs: gvfs-admin socket ownership race permits local root

HIGH 66

A flaw was found in the admin backend of gvfs.

CVSS 3.1HIGH 7.0 Local Low privileges No interaction EPSS 0.00223 Published 2026-09-10 Partial fix · 1.62.0, 1.60.3 +7 CWE-367

TI-2026-57923 CVE-2026-84270 · GHSA-2rh6-86rx-p849

Gvfs: mtp: out-of-bounds read in do_read()

LOW 19

A flaw was found in the MTP backend in gvfs.

CVSS 3.1MEDIUM 4.3 Physical No auth User interaction EPSS 0.0015 Published 2026-09-01 Partial fix · 1.60.2 CWE-125

TI-2026-57922 CVE-2026-84269 · GHSA-7jmj-69v2-2vjf

Gvfs: afp: heap-based buffer overflow in dsi read path

MEDIUM 62

A flaw was found in the AFP backend in gvfs.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.00302 Published 2026-09-01 Partial fix · 1.60.2 CWE-122

TI-2026-57920 CVE-2026-84267 · GHSA-7w8w-22g3-g4f8

Gvfs: sftp: uninitialized heap disclosure in read_string()

MEDIUM 53

A flaw was found in the SFTP backend in gvfs.

CVSS 3.1MEDIUM 4.3 Network No auth User interaction EPSS 0.00212 Published 2026-09-01 Partial fix · 1.60.2 CWE-908

TI-2026-57921 CVE-2026-84268 · GHSA-8cxg-v7p7-qc7j

Gvfs: sftp: heap-based buffer overflow in read_reply()

MEDIUM 41

A flaw was found in the SFTP backend in gvfs.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00622 Published 2026-09-01 Partial fix · 1.60.2, 1.54.4-4.el10_2.1 +10 CWE-122

TI-2026-56782 CVE-2026-82343 · GHSA-cj7r-2p4g-x2hx

Gimp: heap out-of-bounds read and stack out-of-bounds access in psd loader from channel-count handling

LOW 26

A flaw was found in the file-psd plugin in GIMP.

CVSS 3.1MEDIUM 6.1 Local No auth User interaction EPSS 0.00183 Published 2026-08-28 Fix deferred CWE-120

Vulnerabilities

Filters