Approved changes feed: RSS · Atom
cpe:2.3:a:gnome:epiphany:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Gnome (0ee6d85f-ce9a-5064-936c-231d12a60ad5) |
|---|---|
| Product | Epiphany (4bfd7d10-2af2-5aa6-acf6-7e978e8b0881) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from purl2cpe mapping |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:deb/debian/epiphany-browser |
purl2cpe | 2026-06-01 10:17:20.033115 |
pkg:deb/ubuntu/epiphany-browser |
purl2cpe | 2026-06-01 10:17:20.033117 |
pkg:github/gnome/epiphany |
purl2cpe | 2026-06-01 10:17:20.033118 |
pkg:rpm/fedora/epiphany |
purl2cpe | 2026-06-01 10:17:20.033120 |
pkg:rpm/opensuse/epiphany |
purl2cpe | 2026-06-01 10:17:20.033121 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2023-26081 |
vulnerable | 2026-06-08 05:57:38.573516 |
Details available
In Epiphany (aka GNOME Web) through 43.0, untrusted web content can trick users into exfiltrating passwords, because autofill occurs in sandboxed contexts.
Published: 2023-02-20T00:00:00.000Z
Updated: 2025-03-18T15:00:49.464Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-29536 |
vulnerable | 2026-06-08 05:42:48.452856 |
Details available
In GNOME Epiphany before 41.4 and 42.x before 42.2, an HTML document can trigger a client buffer overflow (in ephy_string_shorten in the UI process) via a long page title. The issue occurs because the number of bytes for a UTF-8 ellipsis character is not properly considered.
Published: 2022-04-20T22:37:09.000Z
Updated: 2024-08-03T06:26:06.251Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-45088 |
vulnerable | 2026-06-08 05:36:47.801995 |
Details available
XSS can occur in GNOME Web (aka Epiphany) before 40.4 and 41.x before 41.1 via an error page.
Published: 2021-12-16T02:19:17.000Z
Updated: 2024-08-04T04:32:13.514Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-45087 |
vulnerable | 2026-06-08 05:36:47.801341 |
Details available
XSS can occur in GNOME Web (aka Epiphany) before 40.4 and 41.x before 41.1 when View Source mode or Reader mode is used, as demonstrated by a a page title.
Published: 2021-12-16T02:19:26.000Z
Updated: 2024-08-04T04:32:13.629Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-45086 |
vulnerable | 2026-06-08 05:36:47.800790 |
Details available
XSS can occur in GNOME Web (aka Epiphany) before 40.4 and 41.x before 41.1 because a server's suggested_filename is used as the pdf_name value in PDF.js.
Published: 2021-12-16T02:19:35.000Z
Updated: 2024-08-04T04:32:13.609Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-45085 |
vulnerable | 2026-06-08 05:36:47.800071 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-6251 |
vulnerable | 2026-06-08 05:14:10.413907 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-12016 |
vulnerable | 2026-06-08 05:10:39.714457 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-11396 |
vulnerable | 2026-06-08 05:10:38.412855 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2005-0238 |
vulnerable | 2026-06-08 04:48:12.069057 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.