How many CVEs does GNOME have?

GNOME has 551 published CVE records since 2000, including 136 in the last two years.

How many GNOME CVEs are in CISA KEV?

None of GNOME's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.

Which GNOME products have the most CVEs?

The GNOME products with the most published CVEs are libxml2, gimp, libsoup, glib, gdk-pixbuf.

What are the most common weakness types in GNOME CVEs?

GNOME's CVEs most often map to these CWE weakness types: CWE-190 (Integer Overflow or Wraparound), CWE-122 (Heap-based Buffer Overflow), CWE-416 (Use After Free), CWE-476 (NULL Pointer Dereference).

Are there public exploits for GNOME vulnerabilities?

Yes — 75 of GNOME's CVEs have a known public exploit.

How many critical GNOME vulnerabilities are there?

GNOME has 52 critical and 240 high-severity CVEs.

What is the average severity of GNOME CVEs?

The average CVSS base score across GNOME's scored CVEs is 6.7.

RadicalNotion.AI

Log in Start free

Log in

Log in Start free

551 CVEs

GNOME Vulnerabilities

Name: GNOME vulnerability dataset (CVEs)
Creator: RadicalNotion.AI
License: https://creativecommons.org/licenses/by-nc/4.0/

CVE security advisories and vulnerability history for GNOME.

551

Total CVEs

Published

0

In CISA KEV

Exploited in the wild

75

Public exploits

PoC or exploit code

6.7

Avg CVSS

2000–2026

Overview

GNOME has 551 published CVE records since 2000, of which 0 are in CISA's Known Exploited Vulnerabilities catalog and 75 have a known public exploit. The average CVSS base score across scored CVEs is 6.7.

This page aggregates every publicly disclosed vulnerability (CVE) affecting GNOME products, with severity breakdowns, the most-affected products, the most common weakness types, and the latest disclosures.

Security scorecard

A quick read on GNOME's vulnerability posture, as a share of its 551 published CVEs.

Average CVSS: 6.7
Critical / high: 53%
Actively exploited (KEV): 0%
Public exploit available: 14%
Patch available: 88%

Severity and exploitation

How the CVSS severity of GNOME's CVEs breaks down, plus how many are exploited in the wild or have public exploit code.

Critical52

High240

Medium219

Low40

In CISA’s Known Exploited Vulnerabilities catalog

0

None of GNOME's CVEs are currently listed in CISA's KEV catalog.

Public exploits

75

75 of GNOME's CVEs have a known public exploit available.

Most affected products

The GNOME products with the most published CVEs. Follow any product to browse its versions and vulnerabilities.

Common weakness types

The CWE weakness categories most often found in GNOME CVEs. Follow any weakness for its full explanation.

CNAs that assign these CVEs

The CVE Numbering Authorities that publish GNOME CVE records.

Disclosure activity by year

How many GNOME CVEs were published each year.

2019

38

2020

24

2021

30

2022

19

2023

14

2024

23

2025

77

2026

59

Latest GNOME CVEs

The most recently disclosed vulnerabilities affecting GNOME.

Gimp: gimp: integer overflow in read_rle_channel()
CWE-190
High · CVSS 7.8
EPSS 0.2%2026-07-07
Gimp: gimp: stack buffer overflow in pnmscanner_gettoken()
CWE-193
High · CVSS 7.8
EPSS 0.2%2026-07-06
Gimp: gimp: heap buffer overflow in read_channel_data()
CWE-122
High · CVSS 7.3
EPSS 0.2%2026-07-03
Gimp: gimp: double-free in read_layer_block()
CWE-415
Medium · CVSS 6.1
EPSS 0.1%2026-07-02
Glib: integer underflow in gio/gdbusintrospection.c via "g_dbus_node_info_new_for_xml"
CWE-191
Critical · CVSS 9.1
EPSS 0.4%2026-06-30
Glib: path traversal in glib/gio/gdbusauthmechanismsha1.c via keyring_lookup_entry and mechanism_client_data_receive
CWE-22
High · CVSS 7.5
EPSS 0.4%2026-06-30
Glib: off-by-one error in glib/gkeyfile.c via "g_key_file_get_locale_string_list"
CWE-193
High · CVSS 8.6
EPSS 0.3%2026-06-30
Glib: buffer over-read in glib/giochannel.c via "g_io_channel_read_line_backend"
CWE-126
High · CVSS 8.2
EPSS 0.3%2026-06-30
Glib: buffer over-read in g_regex_replace() via glib/gregex.c:string_append() and g_utf8_next_char()
CWE-126
High · CVSS 8.2
EPSS 0.3%2026-06-30
Glib: out-of-bounds read in glib/gdatetime.c:g_date_time_get_ymd via invalid gdatetime
CWE-125
High · CVSS 7.5
EPSS 0.3%2026-06-30
Glib: buffer over-read in glib/gvariant-serialiser.c via gvs_tuple_is_normal()
CWE-126
High · CVSS 8.2
EPSS 0.3%2026-06-30
Stack-Based Buffer Overflow in libxml2
CWE-121
Low · CVSS 1.8
EPSS 0.1%2026-06-29

Track new GNOME CVEs as they are disclosed and get AI-written analysis and remediation guidance.

Monitor GNOME CVEs

Other vendors

Browse vulnerabilities for other tracked vendors.

openclaw588 CVEs JetBrains580 CVEs Linux Foundation579 CVEs TP-Link570 CVEs TYPO3565 CVEs zohocorp562 CVEs Lenovo519 CVEs Xen Project514 CVEs

Browse all vendors

Frequently asked questions

Common questions about GNOME vulnerabilities.

How many CVEs does GNOME have?: GNOME has 551 published CVE records since 2000, including 136 in the last two years.
How many GNOME CVEs are in CISA KEV?: None of GNOME's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.
Which GNOME products have the most CVEs?: The GNOME products with the most published CVEs are libxml2, gimp, libsoup, glib, gdk-pixbuf.
What are the most common weakness types in GNOME CVEs?: GNOME's CVEs most often map to these CWE weakness types: CWE-190 (Integer Overflow or Wraparound), CWE-122 (Heap-based Buffer Overflow), CWE-416 (Use After Free), CWE-476 (NULL Pointer Dereference).
Are there public exploits for GNOME vulnerabilities?: Yes — 75 of GNOME's CVEs have a known public exploit.
How many critical GNOME vulnerabilities are there?: GNOME has 52 critical and 240 high-severity CVEs.
What is the average severity of GNOME CVEs?: The average CVSS base score across GNOME's scored CVEs is 6.7.

References

Vulnerability data is sourced from the CVE Program; severity, KEV, and exploit signals are aggregated by RadicalNotion.AI.

Track GNOME vulnerabilities

Monitor new GNOME vulnerabilities as they are disclosed, with AI-written analysis and remediation guidance.

Start free See pricing