Sign inStart freeBook a demo

Gnome vulnerabilitiesNone on the known-exploited list.

Vendor
The short answer

Gnome has 324 published vulnerabilities across 106 products in our catalogue. None of them is on the list of flaws known to be exploited today. The most affected product is Glib, with 27. If you run Gnome software, patch the exploited flaws first.

See the exploited flaws

We keep watching the known-exploited list.

Products

Which Gnome products have the most vulnerabilities?

Glib leads with 27 published vulnerabilities. Open a product to see its versions and which of its flaws criminals are already using.

  1. Glib27
  2. Evolution22
  3. Gdk-Pixbuf19
  4. Gtk15
  5. Gdm15
  6. Networkmanager13
  7. Epiphany13
  8. Gnome-Shell11
  9. Screensaver11
  10. Gdkpixbuf11
Published vulnerabilities
Known exploited

Which Gnome vulnerabilities are being exploited?

This is the list that matters most: flaws criminals are using now.

None of Gnome's published vulnerabilities is on the list of flaws known to be exploited today. We keep watching that list.

Exploit likelihood

Which Gnome flaws are most likely to be used?

Ranked by the latest exploit-likelihood forecast: the chance each flaw is used in an attack in the next 30 days. A high severity score on its own doesn't tell you that. Flaws shared by many other makers' products are left out.

50% or more10% to 49%Under 10%
  1. 51%
    CVE-2017-1000083High

    backend/comics/comics-document.c (aka the comic book backend) in GNOME Evince before 3.24.1 allows remote attackers to execute arbitrary commands via a .cbt file that is a TAR archive containing a filename beginning...

    CVSS7.8Published5 Sep 2017
  2. 23%
    CVE-2017-2885Critical

    An exploitable stack based buffer overflow vulnerability exists in the GNOME libsoup 2.58.

    CVSS9.8Published24 Apr 2018
  3. 19%
    CVE-2008-3533Critical

    Format string vulnerability in the window_error function in yelp-window.c in yelp in Gnome after 2.19.90 and before 2.24 allows remote attackers to execute arbitrary code via format string specifiers in an invalid...

    CVSS10.0Published18 Aug 2008
  4. 19%
    CVE-2011-0020High

    Heap-based buffer overflow in the pango_ft2_font_render_box_glyph function in pango/pangoft2-render.c in libpango in Pango 1.28.3 and earlier, when the FreeType2 backend is enabled, allows user-assisted remote...

    CVSS7.6Published24 Jan 2011
  5. 18%
    CVE-2016-6855High

    Eye of GNOME (aka eog) 3.16.5, 3.17.x, 3.18.x before 3.18.3, 3.19.x, and 3.20.x before 3.20.4, when used with glib before 2.44.1, allow remote attackers to cause a denial of service (out-of-bounds write and crash)...

    CVSS7.5Published7 Sep 2016
  6. 18%
    CVE-2000-0491Critical

    Buffer overflow in the XDMCP parsing code of GNOME gdm, KDE kdm, and wdm allows remote attackers to execute arbitrary commands or cause a denial of service via a long FORWARD_QUERY request.

    CVSS10.0Published24 May 2000
  7. 16%
    CVE-2003-0407Critical

    Buffer overflow in gbnserver for Gnome Batalla Naval 1.0.4 allows remote attackers to execute arbitrary code via a long connection string.

    CVSS10.0Published30 Jun 2003
  8. 13%
    CVE-2017-8871Medium

    The cr_parser_parse_selector_core function in cr-parser.c in libcroco 0.6.12 allows remote attackers to cause a denial of service (infinite loop and CPU consumption) via a crafted CSS file.

    CVSS6.5Published12 Jun 2017
  9. 11%
    CVE-2018-15120Medium

    libpango in Pango 1.40.8 through 1.42.3, as used in hexchat and other products, allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via crafted text with...

    CVSS6.5Published24 Aug 2018
  10. 11%
    CVE-2006-0528Medium

    The cairo library (libcairo), as used in GNOME Evolution and possibly other products, allows remote attackers to cause a denial of service (persistent client crash) via an attached text file that contains...

    CVSS5.0Published2 Feb 2006
Every product

All Gnome products we track.

94 products, most vulnerabilities first. Find the ones you run, then open a product to see its versions and exploited flaws.

This directory lists the 94 Gnome products with at least one tracked version, of 106 in our catalogue.

Precursor Intelligence

Running Gnome? We'll keep checking.

Looking flaws up one at a time doesn't scale. Tell us what you run once, and we tell you which flaws matter to you, in what order, and keep watching for new ones.

  1. Tell us what you runPick your software from a list, or let us work it out from your website.
  2. We match it to every flawOver 400,000 published flaws, checked against your list.
  3. Ranked by real-world riskA 0 to 100 score, led by evidence criminals are using it.
  4. Told as soon as we knowAn alert by email, in the app or by webhook to your own tools.
Start free →Book a demo

Free plan, no card needed. Nothing to install.

FAQ

Common questions, answered plainly.

Something else? Talk to the team →

Our catalogue lists 324 published vulnerabilities across 106 products and 9,072 versions from Gnome.

None of Gnome's vulnerabilities is on the list of flaws known to be exploited today.

Glib, with 27 published vulnerabilities. Its own page lists the ones known to be exploited.

Create a Precursor Intelligence account and track the Gnome products you run. We match them against every published flaw, give each one a risk score from 0 to 100 and tell you as soon as we spot one that affects you, by email, in the app or by webhook.

Keep exploring