CVE-2017-1000025: Gnome Epiphany

High severity, CVSS 7.5. EPSS: 1.4% chance of exploitation in the next 30 days.

GNOME Web (Epiphany) 3.23 before 3.23.5, 3.22 before 3.22.6, 3.20 before 3.20.7, 3.18 before 3.18.11, and prior versions, is vulnerable to a password manager sweep attack resulting in the remote exfiltration of stored passwords for a selected set of websites.

Affected products

• Gnome Epiphany: version 3.18.0 only; version 3.18.1 only; version 3.18.2 only; version 3.18.3 only; version 3.18.4 only; version 3.18.5 only; …

Published 2017-07-17. Last modified 2026-06-17.