EP
Product
Epiphany
14
CVEs
0
On KEV
8.1
Max CVSS
0
New 30D
Severity mix
Critical 0High 6Medium 5Low 0
Watch
Add Epiphany to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2019-6251 | 8.1 | Jan 14 | WebKitGTK and WPE WebKit prior to version 2.24.1 are vulnerable to address bar spoofing upon certain JavaScript redirections Affected: through 3.31.4 |
| CVE-2023-26081 | 7.5 | Feb 20 | In Epiphany (aka GNOME Web) through 43.0, untrusted web content can trick users into exfiltrating passwords, because autofill occurs in sandboxed contexts Affected: before 43.1 |
| CVE-2022-29536 | 7.5 | Apr 20 | In GNOME Epiphany before 41.4 and 42.x before 42.2, an HTML document can trigger a client buffer overflow (in ephy_string_shorten in the UI process) via a long page title Affected: before 41.4; 42.0 before 42.2 |
| CVE-2018-12016 | 7.5 | Jun 7 | libephymain.so in GNOME Web (aka Epiphany) through 3.28.2.1 allows remote attackers to cause a denial of service (application crash) via certain window.open and document.write… Affected: through 3.28.2.1 |
| CVE-2018-11396 | 7.5 | May 23 | ephy-session.c in libephymain.so in GNOME Web (aka Epiphany) through 3.28.2.1 allows remote attackers to cause a denial of service (application crash) via JavaScript code that… Affected: through 3.28.2.1 |
| CVE-2017-1000025 | 7.5 | Jul 17 | GNOME Web (Epiphany) 3.23 before 3.23.5, 3.22 before 3.22.6, 3.20 before 3.20.7, 3.18 before 3.18.11, and prior versions, is vulnerable to a password manager sweep attack… Affected: 3.18.0; 3.18.1; 3.18.2; 3.18.3; 3.18.4; 3.18.5; +25 more |
Showing 6