GV
Product
gvfs
10
CVEs
0
On KEV
8.8
Max CVSS
0
New 30D
Severity mix
Critical 0High 6Medium 4Low 0
Watch
Add gvfs to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-84268 | 8.8 | Sep 1 | Gvfs: sftp: heap-based buffer overflow in read_reply() Affected: before 1.60.2 |
| CVE-2019-12448 | 8.1 | May 29 | An issue was discovered in GNOME gvfs 1.29.4 through 1.41.2 Affected: 1.29.4 through 1.41.2 |
| CVE-2019-12795 | 7.8 | Jun 11 | daemon/gvfsdaemon.c in gvfsd from GNOME gvfs before 1.38.3, 1.40.x before 1.40.2, and 1.41.x before 1.41.3 opened a private D-Bus server socket without configuring an… Affected: before 1.38.3; 1.40.0 before 1.40.2; 1.41.0 before 1.41.3 |
| CVE-2019-12447 | 7.3 | May 29 | An issue was discovered in GNOME gvfs 1.29.4 through 1.41.2 Affected: 1.29.4 through 1.41.2 |
| CVE-2026-88924 | 7.0 | Sep 10 | Gvfs: gvfs-admin socket ownership race permits local root Affected: 1.48.1 before 1.62.0; 1.48.1 before 1.60.3; 1.48.1 before 1.58.5 |
| CVE-2019-3827 | 7.0 | Mar 25 | An incorrect permission check in the admin backend in gvfs before version 1.39.4 was found that allows reading and modify arbitrary files by privileged users without asking for… Affected: before 1.39.4 |
| CVE-2026-84269 | 6.5 | Sep 1 | Gvfs: afp: heap-based buffer overflow in dsi read path Affected: before 1.60.2 |
| CVE-2019-12449 | 5.7 | May 29 | An issue was discovered in GNOME gvfs 1.29.4 through 1.41.2 Affected: 1.29.4 through 1.41.2 |
| CVE-2026-84270 | 4.3 | Sep 1 | Gvfs: mtp: out-of-bounds read in do_read() Affected: before 1.60.2 |
| CVE-2026-84267 | 4.3 | Sep 1 | Gvfs: sftp: uninitialized heap disclosure in read_string() Affected: 1.10.0 before 1.60.2 |
Showing 10