Gvfs
10 CVEs tracked. None of them is in CISA KEV.
This hub aggregates every CVE we track for Gvfs, a product in the consumer software space. Use it to gauge the current risk picture and drill into individual advisories.
Gvfs CVEs per month
| Month | CVEs |
|---|---|
| 2024-10 | 0 |
| 2024-11 | 0 |
| 2024-12 | 0 |
| 2025-01 | 0 |
| 2025-02 | 0 |
| 2025-03 | 0 |
| 2025-04 | 0 |
| 2025-05 | 0 |
| 2025-06 | 0 |
| 2025-07 | 0 |
| 2025-08 | 0 |
| 2025-09 | 0 |
| 2025-10 | 0 |
| 2025-11 | 0 |
| 2025-12 | 0 |
| 2026-01 | 0 |
| 2026-02 | 0 |
| 2026-03 | 0 |
| 2026-04 | 0 |
| 2026-05 | 0 |
| 2026-06 | 0 |
| 2026-07 | 0 |
| 2026-08 | 0 |
| 2026-09 | 5 |
Severity
How the 10 CVEs score on CVSS. Severity is not exploitation: KEV is counted above.
- High6
- Medium4
Latest CVEs
The 10 most recently published vulnerabilities affecting Gvfs.
- CVE-2026-88924Gvfs: gvfs-admin socket ownership race permits local root7.0
- CVE-2026-84270Gvfs: mtp: out-of-bounds read in do_read()4.3
- CVE-2026-84269Gvfs: afp: heap-based buffer overflow in dsi read path6.5
- CVE-2026-84267Gvfs: sftp: uninitialized heap disclosure in read_string()4.3
- CVE-2026-84268Gvfs: sftp: heap-based buffer overflow in read_reply()8.8
- CVE-2019-12795daemon/gvfsdaemon.c in gvfsd from GNOME gvfs before 1.38.3, 1.40.x before 1.40.2, and 1.41.x before 1.41.3 opened a private D-Bus server socket without configuring an authorization rule. A local at...7.8
- CVE-2019-12449An issue was discovered in GNOME gvfs 1.29.4 through 1.41.2. daemon/gvfsbackendadmin.c mishandles a file's user and group ownership during move (and copy with G_FILE_COPY_ALL_METADATA) operations f...5.7
- CVE-2019-12448An issue was discovered in GNOME gvfs 1.29.4 through 1.41.2. daemon/gvfsbackendadmin.c has race conditions because the admin backend doesn't implement query_info_on_read/write.8.1
- CVE-2019-12447An issue was discovered in GNOME gvfs 1.29.4 through 1.41.2. daemon/gvfsbackendadmin.c mishandles file ownership because setfsuid is not used.7.3
- CVE-2019-3827An incorrect permission check in the admin backend in gvfs before version 1.39.4 was found that allows reading and modify arbitrary files by privileged users without asking for password when no aut...7.0
Product grouping is registry-driven, with AI assist and human review. How it works