- Products & ServicesProducts & Services
- SolutionsSolutions
- PricingPricing
- CompanyCompany
- ResourcesResources
en
en
A short verification protects source data and prevents automated AI requests.
Verifying...
As of 11/07/2026, gvfs recorded 5 security vulnerabilities in the last 90 days, of which 2 are rated High or Critical. None of these vulnerabilities is actively exploited (KEV) according to CISA's catalog. CyStack recommends that organizations and individual users apply patches as soon as possible.
CyStack does not yet have sufficient official-source data to identify the latest version of gvfs and determine which vulnerabilities affect that version.
CyStack VulnScan continuously discovers assets, validates vulnerabilities, and helps security teams prioritize remediation across the organization.
CVE-2026-88924Gvfs: gvfs-admin socket ownership race permits local rootCVE-2026-84270Gvfs: mtp: out-of-bounds read in do_read()CVE-2026-84269Gvfs: afp: heap-based buffer overflow in dsi read pathCVE-2026-84268Gvfs: sftp: heap-based buffer overflow in read_reply()CVE-2026-84267Gvfs: sftp: uninitialized heap disclosure in read_string()| Vulnerability | Exploitation status | Fix | Published | Severity |
|---|---|---|---|---|
CVE-2026-88924Gvfs: gvfs-admin socket ownership race permits local root | Exploitation statusActively exploited | FixYes | Published09/10/2026 | SeverityHigh |
CVE-2026-84270Gvfs: mtp: out-of-bounds read in do_read() | Exploitation statusNot exploited | FixYes | Published09/01/2026 | SeverityMedium |
CVE-2026-84269Gvfs: afp: heap-based buffer overflow in dsi read path | Exploitation statusActively exploited | FixYes | Published09/01/2026 | SeverityMedium |
CVE-2026-84268Gvfs: sftp: heap-based buffer overflow in read_reply() | Exploitation statusNot exploited | FixYes | Published09/01/2026 | SeverityHigh |
CVE-2026-84267Gvfs: sftp: uninitialized heap disclosure in read_string() | Exploitation statusActively exploited | FixYes | Published09/01/2026 | SeverityMedium |
5 Results | Page 1 of 1