g
gnome
Security Risk Profile
34
/100
lowSecurity Risk Score
Comprehensive risk assessment based on 642 vulnerabilities, EPSS scores, exploitation status, and remediation availability.
📅 Data spans from September 23, 1999 to present
642
Total CVEs
229
Critical+High
1
Exploited
92
Unpatched
Threat Assessment
Avg CVSS
5.8
Base severity
Avg EPSS
0%
Exploit probability
Unpatched
92
Critical/High
Risk Level
34/100
low
⚠️ 1 Active Exploits🆕 9Fresh (<7d)📈 20 in Last 30 Days
Severity Distribution
Critical
39High
190Medium
294Low
78Exploit Likelihood
>50% chance
020-50%
05-20%
0<5%
54Age Distribution
Common Weaknesses (CWE)
1
Buffer Overflow
105
2
Integer Overflow
58
3
Null Pointer Dereference
28
4
Input Validation
25
5
Use After Free
22
Most Affected Products
1. GTK Gtk\+580
2. Gnome GLib336
3. Gnome empathy269
4. redhat Enterprise Linux236
5. Sun OpenSolaris216
Recent Vulnerabilities
See more →CVE-2026-74859
CVSS 6.8medium
Gnome-tweaks: path traversal in theme installer
Sep 8, 2026🔧 No Patch
REDHAT-BUG-2529702
CVSS 4.0medium
Sep 8, 2026🔧 No Patch
REDHAT-BUG-2529697
CVSS 7.0high
Sep 8, 2026🔧 No Patch
https://seclists.org/oss-sec/2026/q3/657
unknown
Vulnerabilities fixed in libxml2-2.15.4
Sep 5, 2026🔧 No Patch
CVE-2026-86141
CVSS 2.9low
Sep 5, 2026🔧 No Patch
CVE-2026-85534
CVSS 5.9medium
Libsoup: libsoup: http/2 client crash in on_data_source_read_callback when settings initial_window_size shrinks during deferred body read
Sep 4, 2026🔧 No Patch
CVE-2026-84270
CVSS 4.3medium
Gvfs: mtp: out-of-bounds read in do_read()
Sep 1, 2026🔧 No Patch
CVE-2026-84268
CVSS 8.8high
Gvfs: sftp: heap-based buffer overflow in read_reply()
Aug 31, 2026🔧 No Patch
REDHAT-BUG-2526485
CVSS 7.0high
Aug 31, 2026🔧 No Patch
CVE-2026-84267
CVSS 4.3medium
Gvfs: sftp: uninitialized heap disclosure in read_string()
Aug 31, 2026🔧 No Patch
Monitor gnome in Real-Time
Get instant alerts when new vulnerabilities are discovered. Stay ahead of security threats with SecAlerts.