en
GNOME is a global, open-source desktop ecosystem backed by the GNOME Foundation, a nonprofit organization that coordinates development of the GNOME project and its community. It encompasses core libraries and applications used across Linux and other platforms, with GNOME Web (Epiphany) as the official web browser and a suite of productivity and accessibility tools.
As of 11/09/2026, GNOME recorded 28 security vulnerabilities in the last 90 days across 12 products, including 11 rated High or above and 0 known exploited vulnerabilities (KEV) that should be prioritized for immediate remediation.
Over the last 90 days, GIMP had the most security vulnerabilities in the GNOME ecosystem, with 9 vulnerabilities—approximately 32.14% of the provider's total vulnerabilities during this period.
CyStack VulnScan continuously discovers assets, validates vulnerabilities, and helps security teams prioritize remediation across the organization.
CVE-2025-49795Libxml: null pointer dereference leads to denial of service (dos)CVE-2024-52531CVE-2024-52531CVE-2019-25085GNOME gvdb gvdb-builder.c gvdb_table_write_contents_async use after freeCVE-2020-16125gdm3 would start gnome-initial-setup if it cannot contact accountserviceCVE-2012-1096CVE-2012-1096| Vulnerability | Exploitation status | Fix | Affected product | Published | Severity |
|---|---|---|---|---|---|
CVE-2025-49795Libxml: null pointer dereference leads to denial of service (dos) | Exploitation statusNot exploited | FixYes |
| Published06/16/2025 |
| SeverityHigh |
CVE-2024-52531CVE-2024-52531 | Exploitation statusActively exploited | FixYes | Affected productlibsoup | Published11/11/2024 | SeverityHigh |
|---|
CVE-2019-25085GNOME gvdb gvdb-builder.c gvdb_table_write_contents_async use after free | Exploitation statusNot confirmed | FixYes | Affected productgvdb | Published12/26/2022 | SeverityMedium |
|---|
CVE-2020-16125gdm3 would start gnome-initial-setup if it cannot contact accountservice | Exploitation statusNot confirmed | FixYes | Affected productGDM3 | Published11/10/2020 | SeverityHigh |
|---|
CVE-2012-1096CVE-2012-1096 | Exploitation statusNot confirmed | FixNo | Affected productNetworkManager | Published03/10/2020 | SeverityUnknown |
|---|
CVE-2013-4166CVE-2013-4166 | Exploitation statusNot confirmed | FixNo | Affected productEvolution | Published02/06/2020 | SeverityUnknown |
|---|
CVE-2019-1010238CVE-2019-1010238 | Exploitation statusNot confirmed | FixNo | Affected productPango | Published07/19/2019 | SeverityUnknown |
|---|
CVE-2011-1830Ekiga attempts to dlopen /tmp/ekiga_test.so | Exploitation statusNot confirmed | FixYes | Affected productEkiga | Published04/22/2019 | SeverityMedium |
|---|
CVE-2017-12164CVE-2017-12164 | Exploitation statusNot confirmed | FixNo | Affected productgdm | Published07/26/2018 | SeverityMedium |
|---|
CVE-2017-2885CVE-2017-2885 | Exploitation statusNot confirmed | FixNo | Affected productlibsoup | Published04/24/2018 | SeverityCritical |
|---|
CVE-2017-2870CVE-2017-2870 | Exploitation statusNot confirmed | FixNo | Affected productGdk-Pixbuf | Published09/05/2017 | SeverityHigh |
|---|
CVE-2017-2862CVE-2017-2862 | Exploitation statusNot confirmed | FixNo | Affected productGdk-Pixbuf | Published09/05/2017 | SeverityHigh |
|---|
62 Results | Page 2 of 2