en
GNOME is a global open-source software project focused on free personal computing. It develops a Linux desktop environment, essential applications, an application development platform, runtime services, and supporting components, with its worldwide community supported by the nonprofit GNOME Foundation.
As of 09/13/2026, GNOME recorded 30 security vulnerabilities in the last 90 days across 9 products, including 10 rated High or above and 0 known exploited vulnerabilities (KEV) that should be prioritized for immediate remediation.
Over the last 90 days, GIMP had the most security vulnerabilities in the GNOME ecosystem, with 11 vulnerabilities—approximately 36.67% of the provider's total vulnerabilities during this period.
| Vulnerability | Exploitation status | Fix | Affected product | Published | Severity |
|---|---|---|---|---|---|
CVE-2026-88924Gvfs: gvfs-admin socket ownership race permits local root | Exploitation statusPublic exploit | FixYes | Affected productgvfs | Published09/10/2026 | SeverityHigh |
CVE-2026-84270Gvfs: mtp: out-of-bounds read in do_read() | Exploitation statusNot known exploited | FixYes | Affected productgvfs | Published09/01/2026 | SeverityMedium |
CVE-2026-84269Gvfs: afp: heap-based buffer overflow in dsi read path | Exploitation statusPublic exploit | FixYes | Affected productgvfs | Published09/01/2026 | SeverityMedium |
CVE-2026-84267Gvfs: sftp: uninitialized heap disclosure in read_string() | Exploitation statusPublic exploit | FixYes | Affected productgvfs | Published09/01/2026 | SeverityMedium |
CVE-2026-84268Gvfs: sftp: heap-based buffer overflow in read_reply() | Exploitation statusNot known exploited | FixYes | Affected productgvfs | Published09/01/2026 | SeverityHigh |
CVE-2026-82343Gimp: heap out-of-bounds read and stack out-of-bounds access in psd loader from channel-count handling | Exploitation statusNot known exploited | FixNot confirmed | Affected productGIMP | Published08/28/2026 | SeverityMedium |
CVE-2026-82330Gimp: heap out-of-bounds read in pvr vq (compressed) decoder due to missing bounds check | Exploitation statusPublic exploit | FixNot confirmed | Affected productGIMP | Published08/28/2026 | SeverityMedium |
CVE-2026-82328Gimp: heap out-of-bounds read in ico loader via unvalidated used_clrs palette count | Exploitation statusPublic exploit | FixNot confirmed | Affected productGIMP | Published08/28/2026 | SeverityMedium |
CVE-2026-82324Gimp: heap out-of-bounds reads in iff/ilbm loader from ham row size mismatch and nplanes=0 | Exploitation statusNot known exploited | FixNot confirmed | Affected productGIMP | Published08/28/2026 | SeverityMedium |
CVE-2026-77652Dia: dia: heap buffer overflow in wpg colormap parser via out-of-bounds palette index | Exploitation statusPublic exploit | FixYes | Affected productDia | Published08/26/2026 | SeverityHigh |
CVE-2026-79902Gimp: stack vla size underflow denial of service in seattle | Exploitation statusPublic exploit | FixNot confirmed | Affected productGIMP | Published08/26/2026 | SeverityMedium |
CVE-2026-77658Dia: dia: stack buffer overflow in bus object via unvalidated handle count in project files | Exploitation statusPublic exploit | FixYes | Affected productDia | Published08/26/2026 | SeverityHigh |
CVE-2026-80101Gimp: multiple heap out-of-bounds reads in xwd loader from unrelated width and bytes-per-line validation | Exploitation statusPublic exploit | FixNot confirmed | Affected productGIMP | Published08/25/2026 | SeverityMedium |
CVE-2026-78475Gimp: unbounded stack vla and 21-byte stack over-read in pix (esm) loader | Exploitation statusNot known exploited | FixNot confirmed | Affected productGIMP | Published08/24/2026 | SeverityMedium |
CVE-2026-78465Gimp: integer overflow in pcx loader (planes=4) leads to heap overflow on 32-bit | Exploitation statusPublic exploit | FixNot confirmed | Affected productGIMP | Published08/24/2026 | SeverityHigh |
CVE-2026-18487Epiphany: address bar / host spoofing via userinfo in ephy_uri_get_decoded_host() | Exploitation statusNot known exploited | FixNot confirmed | Affected productEpiphany | Published08/06/2026 | SeverityMedium |
CVE-2026-18358Gnome-remote-desktop: gnome-remote-desktop system-mode rdp server missing connection throttling allows unauthenticated denial of service | Exploitation statusNot known exploited | FixNot confirmed | Affected productRed Hat Enterprise Linux 10 | Published07/31/2026 | SeverityHigh |
CVE-2026-66759Gimp: out-of-bounds read in file-icns plugin causes information disclosure or crash on crafted icns images | Exploitation statusPublic exploit | FixNot confirmed | Affected productGIMP | Published07/27/2026 | SeverityHigh |
CVE-2026-66757Gimp: signed integer overflow in file-sgi (sgi-lib) causes the plugin to crash on rle sgi images | Exploitation statusPublic exploit | FixNot confirmed | Affected productGIMP | Published07/27/2026 | SeverityMedium |
CVE-2026-66758Gimp: integer overflow in file-fits plugin causes a heap-based buffer overflow on crafted fits images | Exploitation statusNot known exploited | FixNot confirmed | Affected productGIMP | Published07/27/2026 | SeverityHigh |
CVE-2026-66337Libsoup: libsoup: heap buffer over-read via integer underflow in soup_filter_input_stream_read_until() | Exploitation statusNot known exploited | FixNot confirmed | Affected productRed Hat Enterprise Linux 10 | Published07/24/2026 | SeverityMedium |
CVE-2026-66338Libsoup: libsoup: http request smuggling via permissive chunk-size parsing in soup_body_input_stream_read_chunked() | Exploitation statusNot known exploited | FixNot confirmed | Affected productRed Hat Enterprise Linux 10 | Published07/24/2026 | SeverityMedium |
CVE-2026-66339Libsoup: libsoup: proxy credentials leak to destination server via proxy-authorization header in connect tunnels | Exploitation statusNot known exploited | FixNot confirmed | Affected productRed Hat Enterprise Linux 10 | Published07/24/2026 | SeverityMedium |
CVE-2026-16768Gdk-pixbuf: out-of-bounds read in ico parser | Exploitation statusPublic exploit | FixNot confirmed | Affected productGdk-Pixbuf | Published07/23/2026 | SeverityMedium |
CVE-2026-16615Librest: weak random number generation in pkce implementation | Exploitation statusNot known exploited | FixNot confirmed | Affected productlibrest | Published07/22/2026 | SeverityMedium |
CVE-2026-12548Libsoup: heap out-of-bounds read in libsoup due to integer truncation | Exploitation statusPublic exploit | FixNot confirmed | Affected productRed Hat Enterprise Linux 10 | Published07/21/2026 | SeverityMedium |
CVE-2026-58016Glib: integer underflow in gio/gdbusintrospection.c via "g_dbus_node_info_new_for_xml" | Exploitation statusNot known exploited | FixYes | Affected productglib | Published06/30/2026 | SeverityHigh |
CVE-2026-58015Glib: path traversal in glib/gio/gdbusauthmechanismsha1.c via keyring_lookup_entry and mechanism_client_data_receive | Exploitation statusNot known exploited | FixYes | Affected productglib | Published06/30/2026 | SeverityMedium |
CVE-2026-58014Glib: off-by-one error in glib/gkeyfile.c via "g_key_file_get_locale_string_list" | Exploitation statusPublic exploit | FixYes | Affected productglib | Published06/30/2026 | SeverityHigh |
CVE-2026-58013Glib: buffer over-read in glib/giochannel.c via "g_io_channel_read_line_backend" | Exploitation statusNot known exploited | FixYes | Affected productglib | Published06/30/2026 | SeverityMedium |
CVE-2026-58012Glib: buffer over-read in g_regex_replace() via glib/gregex.c:string_append() and g_utf8_next_char() | Exploitation statusNot known exploited | FixYes | Affected productglib | Published06/30/2026 | SeverityMedium |
CVE-2026-58011Glib: out-of-bounds read in glib/gdatetime.c:g_date_time_get_ymd via invalid gdatetime | Exploitation statusPublic exploit | FixYes | Affected productglib | Published06/30/2026 | SeverityMedium |
CVE-2026-58010Glib: buffer over-read in glib/gvariant-serialiser.c via gvs_tuple_is_normal() | Exploitation statusNot known exploited | FixYes | Affected productglib | Published06/30/2026 | SeverityMedium |
CVE-2026-13601Yelp: yelp-xsl: overly permissive content security policy in yelp allows host file disclosure from flatpak applications | Exploitation statusNot known exploited | FixNot confirmed | Affected productRed Hat Enterprise Linux 7 Extended Lifecycle Support | Published06/29/2026 | SeverityHigh |
CVE-2026-12549Libsoup: incomplete fix for cve-2026-2443: range suffix overflow in libsoup soupserver | Exploitation statusNot known exploited | FixNot confirmed | Affected productRed Hat Enterprise Linux 10 | Published06/22/2026 | SeverityMedium |
CVE-2026-6653libxml2: Use after free in xmlParseInternalSubset via improper entity resolution handling | Exploitation statusNot known exploited | FixYes | Affected productlibxml2 | Published06/22/2026 | SeverityHigh |
CVE-2026-2604Evolution-data-server: evolution data server: arbitrary file deletion via inconsistent uri handling | Exploitation statusPublic exploit | FixYes | Affected productEvolution Data Server | Published06/16/2026 | SeverityMedium |
CVE-2026-1767Localsearch: tracker-miners: gnome localsearch mp3 extractor: heap buffer overflow leading to denial of service or information disclosure via malformed mp3 id3 tags | Exploitation statusNot known exploited | FixNot confirmed | Affected productRed Hat Enterprise Linux 10 | Published06/16/2026 | SeverityMedium |
CVE-2026-1766Localsearch: tracker-miners: gnome localsearch mp3 extractor: denial of service and information disclosure via malformed mp3 files. | Exploitation statusNot known exploited | FixNot confirmed | Affected productRed Hat Enterprise Linux 10 | Published06/16/2026 | SeverityMedium |
CVE-2026-1764Localsearch: tracker-miners: gnome localsearch mp3 extractor: heap buffer overflow leads to denial of service or information disclosure when parsing mp3 files | Exploitation statusNot known exploited | FixNot confirmed | Affected productRed Hat Enterprise Linux 10 | Published06/16/2026 | SeverityMedium |
CVE-2026-44931malcontent: Disk Space Exhaustion via Globally Accessible D-Bus API | Exploitation statusNot known exploited | FixYes | Affected productmalcontent | Published05/13/2026 | SeverityMedium |
CVE-2026-2708Libsoup: libsoup: http request smuggling via duplicate content-length headers | Exploitation statusNot known exploited | FixNot confirmed | Affected productRed Hat Enterprise Linux 10 | Published04/23/2026 | SeverityLow |
CVE-2026-5201Gdk-pixbuf: gdk-pixbuf: denial of service via heap-based buffer overflow when processing a specially crafted jpeg image | Exploitation statusNot known exploited | FixNot confirmed | Affected productRed Hat Enterprise Linux 10 | Published03/31/2026 | SeverityHigh |
CVE-2026-5119Libsoup: libsoup: information disclosure via cleartext transmission of cookies during https tunnel establishment | Exploitation statusNot known exploited | FixNot confirmed | Affected productRed Hat Enterprise Linux 10 | Published03/30/2026 | SeverityMedium |
CVE-2026-2436Libsoup: libsoup: denial of service via use-after-free in soupserver during tls handshake | Exploitation statusNot known exploited | FixNot confirmed | Affected productRed Hat Enterprise Linux 10 | Published03/26/2026 | SeverityMedium |
CVE-2026-2369Libsoup: libsoup: buffer overread due to integer underflow when handling zero-length resources | Exploitation statusNot known exploited | FixNot confirmed | Affected productRed Hat Enterprise Linux 10 | Published03/19/2026 | SeverityMedium |
CVE-2026-4271Libsoup: libsoup: denial of service via use-after-free in http/2 server | Exploitation statusPublic exploit | FixNot confirmed | Affected productRed Hat Enterprise Linux 10 | Published03/17/2026 | SeverityMedium |
CVE-2026-3633Libsoup: libsoup: header and http request injection via crlf injection | Exploitation statusNot known exploited | FixNot confirmed | Affected productRed Hat Enterprise Linux 10 | Published03/17/2026 | SeverityLow |
CVE-2026-3632Libsoup: libsoup: http smuggling and server-side request forgery via malformed hostnames | Exploitation statusNot known exploited | FixNot confirmed | Affected productRed Hat Enterprise Linux 10 | Published03/17/2026 | SeverityLow |
CVE-2026-3634Libsoup: libsoup: http header injection and response splitting via crlf injection in content-type header | Exploitation statusPublic exploit | FixNot confirmed | Affected productRed Hat Enterprise Linux 10 | Published03/17/2026 | SeverityLow |
CVE-2026-3099Libsoup: libsoup: authentication bypass via digest authentication replay attack | Exploitation statusNot known exploited | FixNot confirmed | Affected productNot confirmed | Published03/12/2026 | SeverityMedium |
CVE-2026-2443Libsoup: out-of-bounds read in libsoup handle_partial_get() leading to heap information disclosure | Exploitation statusNot known exploited | FixNot confirmed | Affected productRed Hat Enterprise Linux 10 | Published02/13/2026 | SeverityMedium |
CVE-2026-1801Libsoup: libsoup: http request smuggling via malformed chunk headers | Exploitation statusNot known exploited | FixNot confirmed | Affected productRed Hat Enterprise Linux 10 | Published02/03/2026 | SeverityMedium |
CVE-2020-37011Gnome Fonts Viewer 3.34.0 Heap Corruption | Exploitation statusPublic exploit | FixNot confirmed | Affected productFonts Viewer | Published01/29/2026 | SeverityHigh |
CVE-2026-1539Libsoup: libsoup: credential leakage via http redirects | Exploitation statusNot known exploited | FixNot confirmed | Affected productRed Hat Enterprise Linux 10 | Published01/28/2026 | SeverityMedium |
CVE-2026-1536Libsoup: libsoup: http header injection or response splitting via crlf injection in content-disposition header | Exploitation statusNot known exploited | FixNot confirmed | Affected productRed Hat Enterprise Linux 10 | Published01/28/2026 | SeverityMedium |
CVE-2026-1467Libsoup: libsoup: http header injection via specially crafted urls when an http proxy is configured | Exploitation statusNot known exploited | FixNot confirmed | Affected productRed Hat Enterprise Linux 10 | Published01/27/2026 | SeverityMedium |
CVE-2025-14512Glib: integer overflow in glib gio attribute escaping causes heap buffer overflow | Exploitation statusNot known exploited | FixYes | Affected productglib | Published12/11/2025 | SeverityMedium |
CVE-2025-14087Glib: glib: buffer underflow in gvariant parser leads to heap corruption | Exploitation statusNot known exploited | FixYes | Affected productglib | Published12/10/2025 | SeverityMedium |
CVE-2025-13601Glib: integer overflow in in g_escape_uri_string() | Exploitation statusNot known exploited | FixYes | Affected productRed Hat Enterprise Linux 10 | Published11/26/2025 | SeverityHigh |
CVE-2025-12105Libsoup: heap use-after-free in libsoup message queue handling during http/2 read completion | Exploitation statusNot known exploited | FixYes | Affected productlibsoup | Published10/23/2025 | SeverityHigh |
CVE-2025-4056Glib: glib crash after long command line | Exploitation statusPublic exploit | FixYes | Affected productglib | Published07/28/2025 | SeverityHigh |
CVE-2025-7424Libxslt: type confusion in xmlnode.psvi between stylesheet and source nodes | Exploitation statusNot known exploited | FixYes | Affected productlibxslt | Published07/10/2025 | SeverityHigh |
CVE-2025-7425Libxslt: libxml2: heap use-after-free in libxslt caused by atype corruption in xmlattrptr | Exploitation statusPublic exploit | FixYes | Affected productlibxml2 | Published07/10/2025 | SeverityHigh |
CVE-2025-6199Gdk-pixbuf: uninitialized memory disclosure in gdkpixbuf gif lzw decoder | Exploitation statusNot known exploited | FixYes | Affected productRed Hat Enterprise Linux 10 | Published06/17/2025 | SeverityLow |
CVE-2025-6196Libgepub: integer overflow in libgepub's epub archive handling | Exploitation statusNot known exploited | FixYes | Affected productRed Hat Enterprise Linux 7 | Published06/17/2025 | SeverityMedium |
CVE-2025-49795Libxml: null pointer dereference leads to denial of service (dos) | Exploitation statusNot known exploited | FixYes | Affected productlibxml2 | Published06/16/2025 | SeverityHigh |
CVE-2025-6052Glib: integer overflow in g_string_maybe_expand() leading to potential buffer overflow in glib gstring | Exploitation statusNot known exploited | FixNot confirmed | Affected productRed Hat Enterprise Linux 10 | Published06/13/2025 | SeverityLow |
CVE-2023-5616 | Exploitation statusNot known exploited | FixYes | Affected productUbuntu's gnome-control-center | Published04/15/2025 | SeverityMedium |
CVE-2025-3155Yelp: arbitrary file read | Exploitation statusPublic exploit | FixYes | Affected productRed Hat Enterprise Linux 8 | Published04/03/2025 | SeverityHigh |
CVE-2025-2784Libsoup: heap buffer over-read in `skip_insignificant_space` when sniffing content | Exploitation statusPublic exploit | FixYes | Affected productRed Hat Enterprise Linux 10 | Published04/03/2025 | SeverityHigh |
CVE-2022-1736 | Exploitation statusNot known exploited | FixYes | Affected productUbuntu's gnome-control-center | Published01/31/2025 | SeverityCritical |
CVE-2023-43091Gnome-maps: gnome maps is vulnerable to a code injection attack (similar to xss) via its service.json | Exploitation statusPublic exploit | FixYes | Affected productgnome-maps | Published11/17/2024 | SeverityCritical |
CVE-2024-52531 | Exploitation statusPublic exploit | FixYes | Affected productlibsoup | Published11/11/2024 | SeverityHigh |
CVE-2024-52530 | Exploitation statusNot known exploited | FixNot confirmed | Affected productNot confirmed | Published11/11/2024 | SeverityHigh |
CVE-2024-52533 | Exploitation statusNot known exploited | FixNot confirmed | Affected productNot confirmed | Published11/11/2024 | SeverityCritical |
CVE-2024-52532 | Exploitation statusNot known exploited | FixNot confirmed | Affected productNot confirmed | Published11/11/2024 | SeverityHigh |
CVE-2024-42415 | Exploitation statusPublic exploit | FixNot confirmed | Affected productG Structured File Library (libgsf) | Published10/03/2024 | SeverityHigh |
CVE-2024-36474 | Exploitation statusPublic exploit | FixNot confirmed | Affected productG Structured File Library (libgsf) | Published10/03/2024 | SeverityHigh |
CVE-2024-34397 | Exploitation statusNot known exploited | FixNot confirmed | Affected productNot confirmed | Published05/07/2024 | SeverityMedium |
CVE-2020-36774 | Exploitation statusPublic exploit | FixNot confirmed | Affected productNot confirmed | Published02/19/2024 | SeverityMedium |
CVE-2022-48622 | Exploitation statusPublic exploit | FixNot confirmed | Affected productNot confirmed | Published01/26/2024 | SeverityHigh |
CVE-2023-5557Tracker-miners: sandbox escape | Exploitation statusNot confirmed | FixNot confirmed | Affected productRed Hat Enterprise Linux 8 | Published10/13/2023 | SeverityHigh |
CVE-2023-43090Gnome-shell: screenshot tool allows viewing open windows when session is locked | Exploitation statusNot known exploited | FixYes | Affected productgnome-shell | Published09/22/2023 | SeverityMedium |
CVE-2023-32636 | Exploitation statusNot known exploited | FixNot confirmed | Affected productglib | Published09/14/2023 | SeverityMedium |
CVE-2023-32643 | Exploitation statusNot known exploited | FixNot confirmed | Affected productNot confirmed | Published09/14/2023 | SeverityMedium |
CVE-2023-32611G_variant_byteswap() can take a long time with some non-normal inputs | Exploitation statusNot known exploited | FixNot confirmed | Affected productRed Hat Enterprise Linux 8 | Published09/14/2023 | SeverityMedium |
CVE-2023-29499Gvariant offset table entry size is not checked in is_normal() | Exploitation statusNot known exploited | FixNot confirmed | Affected productRed Hat Enterprise Linux 8 | Published09/14/2023 | SeverityMedium |
CVE-2023-32665Gvariant deserialisation does not match spec for non-normal data | Exploitation statusPublic exploit | FixNot confirmed | Affected productRed Hat Enterprise Linux 8 | Published09/14/2023 | SeverityMedium |
CVE-2023-36250 | Exploitation statusPublic exploit | FixNot confirmed | Affected productNot confirmed | Published09/14/2023 | SeverityHigh |
CVE-2023-38633 | Exploitation statusNot confirmed | FixNot confirmed | Affected productNot confirmed | Published07/22/2023 | SeverityUnknown |
CVE-2023-26081 | Exploitation statusPublic exploit | FixNot confirmed | Affected productNot confirmed | Published02/20/2023 | SeverityHigh |
CVE-2019-25085GNOME gvdb gvdb-builder.c gvdb_table_write_contents_async use after free | Exploitation statusNot confirmed | FixYes | Affected productgvdb | Published12/26/2022 | SeverityMedium |
CVE-2022-37290 | Exploitation statusPublic exploit | FixNot confirmed | Affected productNot confirmed | Published11/14/2022 | SeverityMedium |
CVE-2021-42522 | Exploitation statusNot confirmed | FixNot confirmed | Affected productGNOME anjuta | Published08/25/2022 | SeverityUnknown |
CVE-2021-3800 | Exploitation statusNot confirmed | FixNot confirmed | Affected productGlib | Published08/23/2022 | SeverityUnknown |
CVE-2021-46829 | Exploitation statusNot confirmed | FixNot confirmed | Affected productNot confirmed | Published07/24/2022 | SeverityUnknown |
CVE-2021-3982 | Exploitation statusNot confirmed | FixNot confirmed | Affected productgnome-shell | Published04/29/2022 | SeverityUnknown |
CVE-2022-29536 | Exploitation statusNot confirmed | FixNot confirmed | Affected productNot confirmed | Published04/20/2022 | SeverityUnknown |
CVE-2021-3567 | Exploitation statusNot confirmed | FixNot confirmed | Affected productcaribou | Published03/25/2022 | SeverityUnknown |
CyStack VulnScan continuously discovers assets, validates vulnerabilities, and helps security teams prioritize remediation across the organization.
Explore CyStack VulnScan
.svg){kind=icon}
