# cve.now: Gnome

The newest entries naming Gnome as an affected vendor (up to 200), of 63 in all, 0 known exploited. Older ones are in the full catalog at https://cve.now/latest.md.

- [CVE-2026-118599](https://cve.now/CVE-2026-118599.md): epiphany: TAR-based .xpi with hard links can overwrite user files during WebExtension install (CVSS 5.5)
- [CVE-2026-118598](https://cve.now/CVE-2026-118598.md): epiphany: clipboard/website-data permission prompt incorrectly grants camera and microphone access (CVSS 6.5)
- [CVE-2026-115683](https://cve.now/CVE-2026-115683.md): epiphany: TLS certificate warning bypass via race in tlsErrorPage message handler (CVSS 6.8)
- [CVE-2026-116124](https://cve.now/CVE-2026-116124.md): GNOME libgsf OLE2 gsf-infile-msole.c ole\_info\_read\_metabat heap-based overflow (CVSS 5.3)
- [CVE-2026-111132](https://cve.now/CVE-2026-111132.md): GNOME libgxps through 0.3.2 Heap Out-of-Bounds Read via path\_geometry\_start\_element (CVSS 6.9)
- [CVE-2026-110777](https://cve.now/CVE-2026-110777.md): Evolution-data-server: local file disclosure via attach file:// uris (CVSS 5.7)
- [CVE-2026-91841](https://cve.now/CVE-2026-91841.md): Networkmanager-vpnc: networkmanager-vpnc: incomplete fix for cve-2018-10900 allows root privilege escalation via ca-file path newline injection (CVSS 7.8)
- [CVE-2026-91840](https://cve.now/CVE-2026-91840.md): Networkmanager-vpnc: networkmanager-vpnc: local privilege escalation to root via newline injection in vpn username (CVSS 7.8)
- [CVE-2026-91839](https://cve.now/CVE-2026-91839.md): Networkmanager-fortisslvpn: networkmanager-fortisslvpn: local privilege escalation to root via crlf injection in vpn profile credentials (CVSS 7.8)
- [CVE-2026-91838](https://cve.now/CVE-2026-91838.md): Networkmanager-sstp: networkmanager-sstp: local privilege escalation to root via shell injection in vpn profile fields (CVSS 7.8)
- [CVE-2026-91837](https://cve.now/CVE-2026-91837.md): Networkmanager-iodine: networkmanager-iodine: local privilege escalation to root via nameserver option injection (CVSS 7.8)
- [CVE-2026-97222](https://cve.now/CVE-2026-97222.md): Gnumeric: gnumeric: heap use-after-free when opening a malformed workbook (CVSS 5.5)
- [CVE-2026-92248](https://cve.now/CVE-2026-92248.md): Gimp: integer overflow when generating a thumbnail preview for a psd file (CVSS 7.8)
- [CVE-2026-88924](https://cve.now/CVE-2026-88924.md): Gvfs: gvfs-admin socket ownership race permits local root (CVSS 7.0)
- [CVE-2026-84270](https://cve.now/CVE-2026-84270.md): Gvfs: mtp: out-of-bounds read in do\_read() (CVSS 4.3)
- [CVE-2026-84269](https://cve.now/CVE-2026-84269.md): Gvfs: afp: heap-based buffer overflow in dsi read path (CVSS 6.5)
- [CVE-2026-84267](https://cve.now/CVE-2026-84267.md): Gvfs: sftp: uninitialized heap disclosure in read\_string() (CVSS 4.3)
- [CVE-2026-84268](https://cve.now/CVE-2026-84268.md): Gvfs: sftp: heap-based buffer overflow in read\_reply() (CVSS 8.8)
- [CVE-2026-82343](https://cve.now/CVE-2026-82343.md): Gimp: heap out-of-bounds read and stack out-of-bounds access in psd loader from channel-count handling (CVSS 6.1)
- [CVE-2026-82330](https://cve.now/CVE-2026-82330.md): Gimp: heap out-of-bounds read in pvr vq (compressed) decoder due to missing bounds check (CVSS 6.1)
- [CVE-2026-82328](https://cve.now/CVE-2026-82328.md): Gimp: heap out-of-bounds read in ico loader via unvalidated used\_clrs palette count (CVSS 6.1)
- [CVE-2026-82324](https://cve.now/CVE-2026-82324.md): Gimp: heap out-of-bounds reads in iff/ilbm loader from ham row size mismatch and nplanes=0 (CVSS 6.1)
- [CVE-2026-77652](https://cve.now/CVE-2026-77652.md): Dia: dia: heap buffer overflow in wpg colormap parser via out-of-bounds palette index (CVSS 7.8)
- [CVE-2026-79902](https://cve.now/CVE-2026-79902.md): Gimp: stack vla size underflow denial of service in seattle (CVSS 5.5)
- [CVE-2026-77658](https://cve.now/CVE-2026-77658.md): Dia: dia: stack buffer overflow in bus object via unvalidated handle count in project files (CVSS 7.8)
- [CVE-2026-80101](https://cve.now/CVE-2026-80101.md): Gimp: multiple heap out-of-bounds reads in xwd loader from unrelated width and bytes-per-line validation (CVSS 4.4)
- [CVE-2026-78475](https://cve.now/CVE-2026-78475.md): Gimp: unbounded stack vla and 21-byte stack over-read in pix (esm) loader (CVSS 6.1)
- [CVE-2026-78465](https://cve.now/CVE-2026-78465.md): Gimp: integer overflow in pcx loader (planes=4) leads to heap overflow on 32-bit (CVSS 7.0)
- [CVE-2026-18487](https://cve.now/CVE-2026-18487.md): Epiphany: address bar / host spoofing via userinfo in ephy\_uri\_get\_decoded\_host() (CVSS 5.4)
- [CVE-2026-18358](https://cve.now/CVE-2026-18358.md): Gnome-remote-desktop: gnome-remote-desktop system-mode rdp server missing connection throttling allows unauthenticated denial of service (CVSS 7.5)
- [CVE-2026-66759](https://cve.now/CVE-2026-66759.md): Gimp: out-of-bounds read in file-icns plugin causes information disclosure or crash on crafted icns images (CVSS 7.1)
- [CVE-2026-66757](https://cve.now/CVE-2026-66757.md): Gimp: signed integer overflow in file-sgi (sgi-lib) causes the plugin to crash on rle sgi images (CVSS 5.5)
- [CVE-2026-66758](https://cve.now/CVE-2026-66758.md): Gimp: integer overflow in file-fits plugin causes a heap-based buffer overflow on crafted fits images (CVSS 7.8)
- [CVE-2026-16768](https://cve.now/CVE-2026-16768.md): Gdk-pixbuf: out-of-bounds read in ico parser (CVSS 5.3)
- [CVE-2026-16615](https://cve.now/CVE-2026-16615.md): Librest: weak random number generation in pkce implementation (CVSS 6.8)
- [CVE-2026-58016](https://cve.now/CVE-2026-58016.md): Glib: integer underflow in gio/gdbusintrospection.c via "g\_dbus\_node\_info\_new\_for\_xml" (CVSS 7.5)
- [CVE-2026-58015](https://cve.now/CVE-2026-58015.md): Glib: path traversal in glib/gio/gdbusauthmechanismsha1.c via keyring\_lookup\_entry and mechanism\_client\_data\_receive (CVSS 5.9)
- [CVE-2026-58014](https://cve.now/CVE-2026-58014.md): Glib: off-by-one error in glib/gkeyfile.c via "g\_key\_file\_get\_locale\_string\_list" (CVSS 7.3)
- [CVE-2026-58013](https://cve.now/CVE-2026-58013.md): Glib: buffer over-read in glib/giochannel.c via "g\_io\_channel\_read\_line\_backend" (CVSS 6.5)
- [CVE-2026-58012](https://cve.now/CVE-2026-58012.md): Glib: buffer over-read in g\_regex\_replace() via glib/gregex.c:string\_append() and g\_utf8\_next\_char() (CVSS 6.5)
- [CVE-2026-58011](https://cve.now/CVE-2026-58011.md): Glib: out-of-bounds read in glib/gdatetime.c:g\_date\_time\_get\_ymd via invalid gdatetime (CVSS 6.5)
- [CVE-2026-58010](https://cve.now/CVE-2026-58010.md): Glib: buffer over-read in glib/gvariant-serialiser.c via gvs\_tuple\_is\_normal() (CVSS 6.5)
- [CVE-2026-6653](https://cve.now/CVE-2026-6653.md): libxml2: Use after free in xmlParseInternalSubset via improper entity resolution handling (CVSS 7.0)
- [CVE-2026-2604](https://cve.now/CVE-2026-2604.md): Evolution-data-server: evolution data server: arbitrary file deletion via inconsistent uri handling (CVSS 5.6)
- [CVE-2026-44931](https://cve.now/CVE-2026-44931.md): malcontent: Disk Space Exhaustion via Globally Accessible D-Bus API (CVSS 5.1)
- [CVE-2020-37011](https://cve.now/CVE-2020-37011.md): Gnome Fonts Viewer 3.34.0 Heap Corruption (CVSS 8.4)
- [CVE-2025-14512](https://cve.now/CVE-2025-14512.md): Glib: integer overflow in glib gio attribute escaping causes heap buffer overflow (CVSS 6.5)
- [CVE-2025-14087](https://cve.now/CVE-2025-14087.md): Glib: glib: buffer underflow in gvariant parser leads to heap corruption (CVSS 5.6)
- [CVE-2025-12105](https://cve.now/CVE-2025-12105.md): Libsoup: heap use-after-free in libsoup message queue handling during http/2 read completion (CVSS 7.5)
- [CVE-2025-7424](https://cve.now/CVE-2025-7424.md): Libxslt: type confusion in xmlnode.psvi between stylesheet and source nodes (CVSS 7.5)
- [CVE-2025-7425](https://cve.now/CVE-2025-7425.md): Libxslt: libxml2: heap use-after-free in libxslt caused by atype corruption in xmlattrptr (CVSS 7.8)
- [CVE-2025-49795](https://cve.now/CVE-2025-49795.md): Libxml: null pointer dereference leads to denial of service (dos) (CVSS 7.5)
- [CVE-2024-52531](https://cve.now/CVE-2024-52531.md): GNOME libsoup before 3.6.1 allows a buffer overflow in applications that perform conversion to UTF-8 in soup\_header\_parse\_param\_list\_strict. (CVSS 6.5)
- [CVE-2019-25085](https://cve.now/CVE-2019-25085.md): GNOME gvdb gvdb-builder.c gvdb\_table\_write\_contents\_async use after free (CVSS 6.3)
- [CVE-2020-16125](https://cve.now/CVE-2020-16125.md): gdm3 would start gnome-initial-setup if it cannot contact accountservice (CVSS 7.2)
- [CVE-2012-1096](https://cve.now/CVE-2012-1096.md): NetworkManager 0.9 and earlier allows local users to use other users' certificates or private keys when making a connection via the file pat (no CVSS)
- [CVE-2013-4166](https://cve.now/CVE-2013-4166.md): The gpg\_ctx\_add\_recipient function in camel/camel-gpg-context.c in GNOME Evolution 3.8.4 and earlier and Evolution Data Server 3.9.5 and ear (no CVSS)
- [CVE-2019-1010238](https://cve.now/CVE-2019-1010238.md): Gnome Pango 1.42 and later is affected by: Buffer Overflow. (no CVSS)
- [CVE-2011-1830](https://cve.now/CVE-2011-1830.md): Ekiga attempts to dlopen /tmp/ekiga\_test.so (CVSS 5.7)
- [CVE-2017-12164](https://cve.now/CVE-2017-12164.md): A flaw was discovered in gdm 3.24.1 where gdm greeter was no longer setting the ran\_once boolean during autologin. (CVSS 4.1)
- [CVE-2017-2885](https://cve.now/CVE-2017-2885.md): An exploitable stack based buffer overflow vulnerability exists in the GNOME libsoup 2.58. (CVSS 9.8)
- [CVE-2017-2870](https://cve.now/CVE-2017-2870.md): An exploitable integer overflow vulnerability exists in the tiff\_image\_parse functionality of Gdk-Pixbuf 2.36.6 when compiled with Clang. (CVSS 8.8)
- [CVE-2017-2862](https://cve.now/CVE-2017-2862.md): An exploitable heap overflow vulnerability exists in the gdk\_pixbuf\_\_jpeg\_image\_load\_increment functionality of Gdk-Pixbuf 2.36.6. (CVSS 8.8)

---

Source: cve.now
Built by [Sazabi](https://www.sazabi.com/?utm_source=cve-now&utm_medium=markdown), AI-native observability and security: automatic issue detection, plain-language log search and live dashboards.
Page: https://cve.now/vendors/gnome
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.