Epiphany vulnerabilities

2 known vulnerabilities in Epiphany from GNOME. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.5 High severity

  Epiphany: Exposure of Resource to Wrong Sphere

  CVE-2023-26081Feb 20, 2023GNOMEEPSS 1.23%

  In Epiphany (aka GNOME Web) through 43.0, untrusted web content can trick users into exfiltrating passwords, because autofill occurs in sandboxed contexts.

• 7.5 High severity

  Epiphany: Out-of-bounds Write

  CVE-2022-29536Apr 20, 2022GNOMEEPSS 2.05%

  In GNOME Epiphany before 41.4 and 42.x before 42.2, an HTML document can trigger a client buffer overflow (in ephy_string_shorten in the UI process) via a long page title. The issue occurs because the number of bytes for a UTF-8 ellipsis character is not prope