CVE-2021-3567: Gnome Caribou

High severity, CVSS 7.5. EPSS: 1.2% chance of exploitation in the next 30 days.

A flaw was found in Caribou due to a regression of CVE-2020-25712 fix. An attacker could use this flaw to bypass screen-locking applications that leverage Caribou as an input mechanism. The highest threat from this vulnerability is to system availability.

Affected products

• Gnome Caribou: before 0.4.21 (fixed in 0.4.21)

Published 2022-03-25. Last modified 2026-06-17.