Product by GNOME
GNOME Epiphany
17 known vulnerabilities in GNOME Epiphany (GNOME), 0 of them actively exploited (CISA KEV).
Key figures
17
Vulnerabilities
0
Actively exploited (KEV)
0
Used by ransomware
0
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| High | CVE-2019-6251 | WebKitGTK: Spoofing | 8.1 | |
| High | CVE-2022-29536 | GNOME Epiphany: Buffer Overflow | 7.5 | |
| High | CVE-2018-12016 | GNOME Epiphany: Denial of Service | 7.5 | |
| High | CVE-2018-11396 | GNOME Epiphany: Denial of Service | 7.5 | |
| High | CVE-2017-1000025 | GNOME Epiphany: security vulnerability | 7.5 | |
| High | CVE-2023-26081 | GNOME Epiphany: security vulnerability | 7.5 | |
| Medium | CVE-2021-45087 | GNOME Epiphany: Cross-Site Scripting (XSS) | 6.1 | |
| Medium | CVE-2021-45085 | GNOME Epiphany: Cross-Site Scripting (XSS) | 6.1 | |
| Medium | CVE-2021-45088 | GNOME Epiphany: Cross-Site Scripting (XSS) | 6.1 | |
| Medium | CVE-2021-45086 | GNOME Epiphany: Cross-Site Scripting (XSS) | 6.1 | |
| Medium | CVE-2026-115683 | epiphany: TLS certificate warning bypass via race in tlsErrorPage message handler | 6.8 | |
| Medium | CVE-2026-118598 | epiphany: clipboard/website-data permission prompt incorrectly grants camera and microphone access | 6.5 | |
| Medium | CVE-2026-118599 | epiphany: TAR-based .xpi with hard links can overwrite user files during WebExtension install | 5.5 | |
| Medium | CVE-2026-18487 | Epiphany: address bar / host spoofing via userinfo in ephy_uri_get_decoded_host() | 5.4 | |
| Not rated | CVE-2005-0238 | GNOME Epiphany: security vulnerability | — | |
| Not rated | CVE-2010-3312 | GNOME Epiphany: security vulnerability | — | |
| Not rated | CVE-2008-5985 | GNOME Epiphany: Code Execution | — |