Vulnerabilities

TI-2026-34215 CVE-2026-46529

PDF /GoToR action argv injection enables single-click RCE via --gtk-module dlopen

HIGH 72

Atril Document Viewer is the default document reader of the MATE desktop environment for Linux.

CVSS 4.0HIGH 8.4 Local No auth User interaction EPSS 0.00529 Published 2026-06-10 Partial fix · 1.26.3, 1.28.4 CWE-77

TI-2023-28577 CVE-2023-52138

Path traversal via crafted cpio archives in Engrampa archivers

HIGH 76

Engrampa is an archive manager for the MATE environment.

CVSS 3.1CRITICAL 9.6 Network No auth User interaction EPSS 0.01666 Published 2024-02-05 No fix listed CWE-25

TI-2023-28520 CVE-2023-52076

Remote Code Execution Vulnerability in Atril's EPUB ebook parsing

HIGH 72

Atril Document Viewer is the default document reader of the MATE desktop environment for Linux.

CVSS 3.1HIGH 8.5 Local No auth User interaction EPSS 0.01085 Published 2024-01-25 Fixed in 1.26.2 CWE-22

TI-2023-28344 CVE-2023-51698

Atril's CBT comic book parsing vulnerable to Remote Code Execution

HIGH 82

Atril is a simple multi-page document viewer.

CVSS 3.1CRITICAL 9.6 Network No auth User interaction EPSS 0.02359 Published 2024-01-12 No fix listed CWE-78

TI-2018-14686 CVE-2018-20681 · GHSA-wcwv-5qmw-xfpj

mate-screensaver before 1.20.2 in MATE Desktop Environment allows physically proximate…

LOW 28

mate-screensaver before 1.20.2 in MATE Desktop Environment allows physically proximate attackers to view screen content and possibly control applications.

CVSS 3.0MEDIUM 6.1 Physical No auth No interaction EPSS 0.00582 Published 2019-01-09 No fix listed CWE-200

TI-2012-04676 CVE-2012-5560 · GHSA-fx77-c6gh-q566

The default configuration in mate-settings-daemon 1.5.3 allows local users to change the…

LOW 11

The default configuration in mate-settings-daemon 1.5.3 allows local users to change the timezone for the system via a crafted D-Bus call.

CVSS 2.0LOW 2.1 Local No auth Interaction — EPSS 0.00372 Published 2014-05-30 No fix listed CWE-264