Gnome
Vulnerability activity for Gnome: what is being exploited, what was published lately, and when the next patch release is due.
Last 30 days
- CVEs
- 0
- Critical (CVSS 9+)
- 0
- Exploited (CISA KEV)
- 0
- With exploit code
- 0
Last 90 days
- CVEs
- 0
- Critical (CVSS 9+)
- 0
- Exploited (CISA KEV)
- 0
- With exploit code
- 0
Last 365 days
- CVEs
- 5
- Critical (CVSS 9+)
- 0
- Exploited (CISA KEV)
- 0
- With exploit code
- 0
Exploited now
None of this vendor's CVEs are on CISA's known-exploited list.
Recent
- 7.5HighJun 30, 2026Gnome glib Memory corruptionCVE-2026-58016A flaw was found in GLib. A state confusion issue exists in g_dbus_node_info_new_for_xml() in the gio/gdbusintrospection.c file when processing malformed D-Bus introspection XML, specifically with a `node` element nested within other elements like `method`, `signal`, `property` or `arg`. This issue can cause an unsigned integer overflow and lead to an out-of-bounds read, resulting in a denial of service.
- 7.3HighJun 30, 2026Gnome glib Memory corruptionCVE-2026-58014A flaw was found in GLib. An off-by-one error can occur in the g_key_file_get_locale_string_list function in the gkeyfile.c file when loading a key file with an empty value. This flaw can cause an out-of-bounds access of 1 byte or a denial of service when the out-of-bounds access crosses a page boundary.
- 7.0HighJun 22, 2026GNOME libxml2 Memory corruptionCVE-2026-6653Use After Free in libxml2's xmlParseInternalSubset from GNOME libxml2 version 2.9.11 to 2.11.0 allows a remote attacker to cause a denial-of-service via maliciously crafted XML input with improper entity resolution handling.
- 5.1MediumMay 13, 2026Gnome malcontent Denial of serviceCVE-2026-44931The newly introduced RecordUsage D-Bus method https://gitlab.freedesktop.org/pwithnall/malcontent/-/blob/0.14.0/libmalcontent-timer/child-timer-service.c in malcontent-timerd allows arbitrary users in the system to slowly fill up disk space in /var/lib/malcontent-timerd
- 7.5HighMar 31, 2026Gnome gdk-pixbuf Memory corruptionCVE-2026-5201A flaw was found in the gdk-pixbuf library. This heap-based buffer overflow vulnerability occurs in the JPEG image loader due to improper validation of color component counts when processing a specially crafted JPEG image. A remote attacker can exploit this flaw without user interaction, for example, via thumbnail generation. Successful exploitation leads to application crashes and denial of service (DoS) conditions.1.1% likely
Top products
- glib2 CVEs in the last year
- malcontent1 CVE in the last year
- libxml21 CVE in the last year
- gdk-pixbuf1 CVE in the last year
Advisories
Official advisories from the last 90 days that name this vendor's CVEs.
- CISA · Oct 20, 2026Hitachi Energy RTU500 ProductCVE-2026-6653
Counts cover CVEs and advisories Watch Floor tracks, by the date they became news. Updated every 10 minutes.