GN
Product
Gnome-shell
11
CVEs
0
On KEV
8.1
Max CVSS
0
New 30D
Severity mix
Critical 0High 1Medium 5Low 0
Watch
Add Gnome-shell to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2017-8288 | 8.1 | Apr 27 | gnome-shell 3.22 through 3.24.1 mishandles extensions that fail to reload, which can lead to leaving extensions enabled in the lock screen Affected: 3.22.0; 3.22.1; 3.22.2; 3.22.3; 3.23.1; 3.23.2; +6 more |
| CVE-2021-20315 | 6.1 | Feb 18 | A locking protection bypass flaw was found in some versions of gnome-shell as shipped within CentOS Stream 8, when the "Application menu" or "Window list" GNOME extensions are… Affected: before 3.32.2 |
| CVE-2023-43090 | 5.5 | Sep 22 | A vulnerability was found in GNOME Shell Affected: 43 before 43.9; 44 before 44.5; 42 |
| CVE-2021-3982 | 5.5 | Apr 29 | Linux distributions using CAP_SYS_NICE for gnome-shell may be exposed to a privilege escalation issue Affected: All versions, or not specified |
| CVE-2020-17489 | 4.3 | Aug 11 | An issue was discovered in certain configurations of GNOME gnome-shell through 3.36.4 Affected: through 3.36.4 |
| CVE-2019-3820 | 4.3 | Feb 6 | It was discovered that the gnome-shell lock screen since version 3.15.91 did not properly restrict all contextual actions Affected: 3.15.91 before 3.30.3; 3.31.0 before 3.31.5 |
| CVE-2014-7300 | – | Dec 25 | GNOME Shell 3.14.x before 3.14.1, when the Screen Lock feature is used, does not limit the aggregate memory consumption of all active PrtSc requests, which allows physically… Affected: 3.14.0 |
| CVE-2013-7221 | – | Apr 29 | The automatic screen lock functionality in GNOME Shell (aka gnome-shell) before 3.10 does not prevent access to the "Enter a Command" dialog, which allows physically proximate… Affected: through 3.9.92; 3.0.0; 3.0.0.1; 3.0.0.2; 3.0.1; 3.0.2; +34 more |
| CVE-2013-7220 | – | Apr 29 | js/ui/screenShield.js in GNOME Shell (aka gnome-shell) before 3.8 allows physically proximate attackers to execute arbitrary commands by leveraging an unattended workstation with… Affected: through 3.7.92; 3.0.0; 3.0.0.1; 3.0.0.2; 3.0.1; 3.0.2; +34 more |
| CVE-2012-4427 | – | Oct 1 | The gnome-shell plugin 3.4.1 in GNOME allows remote attackers to force the download and installation of arbitrary extensions from extensions.gnome.org via a crafted web page Affected: 3.4.1 |
| CVE-2010-4000 | – | Nov 6 | gnome-shell in GNOME Shell 2.31.5 places a zero-length directory name in the LD_LIBRARY_PATH, which allows local users to gain privileges via a Trojan horse shared library in the… Affected: 2.31.5 |
Showing 11