Login Request a demo
GV
Product
gvfs
by GNOME · last CVE Sep 10, 2026
10
CVEs
0
On KEV
8.8
Max CVSS
0
New 30D
Vulnerabilities10In the news0Timeline
Severity mix
Critical 0High 6Medium 4Low 0
Severity
All severities10Critical0High6Medium4Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add gvfs to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-84268
8.8
1%
Sep 1
Gvfs: sftp: heap-based buffer overflow in read_reply()
Affected: before 1.60.2
CVE-2019-12448
8.1
2%
May 29
An issue was discovered in GNOME gvfs 1.29.4 through 1.41.2
Affected: 1.29.4 through 1.41.2
CVE-2019-12795
7.8
0%
Jun 11
daemon/gvfsdaemon.c in gvfsd from GNOME gvfs before 1.38.3, 1.40.x before 1.40.2, and 1.41.x before 1.41.3 opened a private D-Bus server socket without configuring an…
Affected: before 1.38.3; 1.40.0 before 1.40.2; 1.41.0 before 1.41.3
CVE-2019-12447
7.3
2%
May 29
An issue was discovered in GNOME gvfs 1.29.4 through 1.41.2
Affected: 1.29.4 through 1.41.2
CVE-2026-88924
7.0
0%
Sep 10
Gvfs: gvfs-admin socket ownership race permits local root
Affected: 1.48.1 before 1.62.0; 1.48.1 before 1.60.3; 1.48.1 before 1.58.5
CVE-2019-3827
7.0
0%
Mar 25
An incorrect permission check in the admin backend in gvfs before version 1.39.4 was found that allows reading and modify arbitrary files by privileged users without asking for…
Affected: before 1.39.4
Showing 6