Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

gnome gnome-shell - vulnerabilities and exploits

(subscribe to this query)
4.6
CVSSv2
CVE-2013-7220
js/ui/screenShield.js in GNOME Shell (aka gnome-shell) prior to 3.8 allows physically proximate malicious users to execute arbitrary commands by leveraging an unattended workstation with the keyboard focus on the Activities search.
Gnome Gnome-shell 3.7.2.1Gnome Gnome-shell 3.7.2Gnome Gnome-shell 3.7.1Gnome Gnome-shell 3.6.3.1Gnome Gnome-shell 3.3.92Gnome Gnome-shell 3.3.91Gnome Gnome-shell 3.3.90Gnome Gnome-shell 3.3.5Gnome Gnome-shell 3.0.2Gnome Gnome-shell 3.0.1Gnome Gnome-shell 3.0.0.2Gnome Gnome-shell 3.0.0.1Gnome Gnome-shell 3.7.4.1Gnome Gnome-shell 3.7.3.1Gnome Gnome-shell 3.6.2Gnome Gnome-shell 3.6.0Gnome Gnome-shell 3.4.2Gnome Gnome-shell 3.4.0Gnome Gnome-shell 3.3.3Gnome Gnome-shell 3.2.2.1Gnome Gnome-shell 3.1.90.1Gnome Gnome-shell 3.1.4
4.6
CVSSv2
CVE-2013-7221
The automatic screen lock functionality in GNOME Shell (aka gnome-shell) prior to 3.10 does not prevent access to the "Enter a Command" dialog, which allows physically proximate malicious users to execute arbitrary commands by leveraging an unattended workstation.
Gnome Gnome-shell 3.9.5Gnome Gnome-shell 3.9.90Gnome Gnome-shell 3.9.91Gnome Gnome-shellGnome Gnome-shell 3.7.92Gnome Gnome-shell 3.6.1Gnome Gnome-shell 3.6.0Gnome Gnome-shell 3.5.92Gnome Gnome-shell 3.5.91Gnome Gnome-shell 3.2.2.1Gnome Gnome-shell 3.2.2Gnome Gnome-shell 3.2.1Gnome Gnome-shell 3.2.0Gnome Gnome-shell 3.8.0.1Gnome Gnome-shell 3.9.1Gnome Gnome-shell 3.9.3Gnome Gnome-shell 3.7.91Gnome Gnome-shell 3.7.4.1Gnome Gnome-shell 3.6.3.1Gnome Gnome-shell 3.6.2Gnome Gnome-shell 3.5.90Gnome Gnome-shell 3.5.3
6.8
CVSSv2
CVE-2017-8288
gnome-shell 3.22 up to and including 3.24.1 mishandles extensions that fail to reload, which can lead to leaving extensions enabled in the lock screen. With these extensions, a bystander could launch applications (but not interact with them), see information from the extensions (...
Gnome Gnome-shell 3.24.1Gnome Gnome-shell 3.22.2Gnome Gnome-shell 3.23.1Gnome Gnome-shell 3.23.92Gnome Gnome-shell 3.22.0Gnome Gnome-shell 3.23.2Gnome Gnome-shell 3.23.3Gnome Gnome-shell 3.23.90Gnome Gnome-shell 3.23.91Gnome Gnome-shell 3.22.1Gnome Gnome-shell 3.22.3Gnome Gnome-shell 3.24.0
NA
CVE-2023-43090
A vulnerability was found in GNOME Shell. GNOME Shell's lock screen allows an unauthenticated local user to view windows of the locked desktop session by using keyboard shortcuts to unlock the restricted functionality of the screenshot tool.
Gnome Gnome-shellGnome Gnome-shell 42Fedoraproject Fedora 37Fedoraproject Fedora 38
2.1
CVSSv2
CVE-2021-3982
Linux distributions using CAP_SYS_NICE for gnome-shell may be exposed to a privilege escalation issue. An attacker, with low privilege permissions, may take advantage of the way CAP_SYS_NICE is currently implemented and eventually load code to increase its process scheduler prior...
Gnome Gnome-shell -
6.8
CVSSv2
CVE-2012-4427
The gnome-shell plugin 3.4.1 in GNOME allows remote malicious users to force the download and installation of arbitrary extensions from extensions.gnome.org via a crafted web page.
Gnome Gnome-shell 3.4.1
6.9
CVSSv2
CVE-2010-4000
gnome-shell in GNOME Shell 2.31.5 places a zero-length directory name in the LD_LIBRARY_PATH, which allows local users to gain privileges via a Trojan horse shared library in the current working directory.
Gnome Gnome-shell 2.31.5
3.6
CVSSv2
CVE-2021-20315
A locking protection bypass flaw was found in some versions of gnome-shell as shipped within CentOS Stream 8, when the "Application menu" or "Window list" GNOME extensions are enabled. This flaw allows a physical attacker who has access to a locked system to k...
Gnome Gnome-shellCentos Stream 8
1.9
CVSSv2
CVE-2020-17489
An issue exists in certain configurations of GNOME gnome-shell up to and including 3.36.4. When logging out of an account, the password box from the login dialog reappears with the password still visible. If the user had decided to have the password shown in cleartext at login ti...
Gnome Gnome-shellCanonical Ubuntu Linux 20.04Debian Debian Linux 9.0Opensuse Leap 15.2
4.6
CVSSv2
CVE-2019-3820
It exists that the gnome-shell lock screen since version 3.15.91 did not properly restrict all contextual actions. An attacker with physical access to a locked workstation could invoke certain keyboard shortcuts, and potentially other actions.
Gnome Gnome-shellOpensuse Leap 15.0Opensuse Leap 15.1Opensuse Leap 42.3Canonical Ubuntu Linux 18.04Canonical Ubuntu Linux 18.10
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2023-7028memory leaklog injectionCVE-2024-3400CVE-2022-48695CVE-2022-48675CVE-2024-34487CVE-2024-33792spoof
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook