Login Request a demo
EP
Product
Epiphany
by GNOME · last CVE Aug 6, 2026
14
CVEs
0
On KEV
8.1
Max CVSS
0
New 30D
Vulnerabilities14In the news0Timeline
Severity mix
Critical 0High 6Medium 5Low 0
Severity
All severities14Critical0High6Medium5Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Epiphany to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2021-45088
6.1
2%
Dec 16
XSS can occur in GNOME Web (aka Epiphany) before 40.4 and 41.x before 41.1 via an error page
Affected: before 40.4; 41.0 before 41.1
CVE-2021-45087
6.1
2%
Dec 16
XSS can occur in GNOME Web (aka Epiphany) before 40.4 and 41.x before 41.1 when View Source mode or Reader mode is used, as demonstrated by a a page title
Affected: before 40.4; 41.0 before 41.1
CVE-2021-45086
6.1
1%
Dec 16
XSS can occur in GNOME Web (aka Epiphany) before 40.4 and 41.x before 41.1 because a server's suggested_filename is used as the pdf_name value in PDF.js
Affected: before 40.4; 41.0 before 41.1
CVE-2021-45085
6.1
2%
Dec 16
XSS can occur in GNOME Web (aka Epiphany) before 40.4 and 41.x before 41.1 via an about: page, as demonstrated by ephy-about:overview when a user visits an XSS payload page often…
Affected: before 40.4; 41.0 before 41.1
CVE-2026-18487
5.4
0%
Aug 6
Epiphany: address bar / host spoofing via userinfo in ephy_uri_get_decoded_host()
Affected: 49.2
Showing 5