Skip to main content

Gtk

2 CVEs product

Monthly

CVE-2014-1949 Jan 16, 16:59 HIGH This Week

GTK+ 3.10.9 and earlier, as used in cinnamon-screensaver, gnome-screensaver, and other applications, allows physically proximate attackers to bypass the lock screen by pressing the menu button. Rated high severity (CVSS 7.2), this vulnerability is low attack complexity. No vendor patch available.

Authentication Bypass Ubuntu Canonical Gtk Gnome +2
NVD GitHub
CVSS 2.0
7.2
EPSS
0.0%
CVE-2012-4425 Sep 18, 17:55 MEDIUM POC PATCH This Month

libgio, when used in setuid or other privileged programs in spice-gtk and possibly other products, allows local users to gain privileges and execute arbitrary code via the DBUS_SYSTEM_BUS_ADDRESS. Rated medium severity (CVSS 6.9). Public exploit code available.

Privilege Escalation RCE Gtk Spice Gtk Libgio +1
NVD Exploit-DB
CVSS 2.0
6.9
EPSS
0.5%
EPSS 0% CVSS 7.2
HIGH This Week

GTK+ 3.10.9 and earlier, as used in cinnamon-screensaver, gnome-screensaver, and other applications, allows physically proximate attackers to bypass the lock screen by pressing the menu button. Rated high severity (CVSS 7.2), this vulnerability is low attack complexity. No vendor patch available.

Authentication Bypass Ubuntu Canonical +4
NVD GitHub
EPSS 1% CVSS 6.9
MEDIUM POC PATCH This Month

libgio, when used in setuid or other privileged programs in spice-gtk and possibly other products, allows local users to gain privileges and execute arbitrary code via the DBUS_SYSTEM_BUS_ADDRESS. Rated medium severity (CVSS 6.9). Public exploit code available.

Privilege Escalation RCE Gtk +3
NVD Exploit-DB

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy