Advisories · Technology

GNOME Epiphany.

Every CVE that names GNOME Epiphany among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-118599 CVE record

CVSS 5.5 Medium

epiphany: TAR-based .xpi with hard links can overwrite user files during WebExtension install
- GNOME Epiphany
- Path traversal
Not analysed yet 31 Oct 2026
CVE-2026-118598 CVE record

CVSS 6.5 Medium

epiphany: clipboard/website-data permission prompt incorrectly grants camera and microphone access
- GNOME Epiphany
- Broken access control
Not analysed yet 31 Oct 2026
CVE-2026-115683 CVE record

CVSS 6.8 Medium

epiphany: TLS certificate warning bypass via race in tlsErrorPage message handler
- GNOME Epiphany
- Race condition
Not analysed yet 30 Oct 2026
CVE-2026-18487 CVE record

CVSS 5.4 Medium

Epiphany: address bar / host spoofing via userinfo in ephy_uri_get_decoded_host()
- GNOME Epiphany
- CWE-451
Not analysed yet 6 Aug 2026