Gnome Keyring vulnerabilities

2 CVEs affecting Gnome Keyring, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2012-6111, published 2019-12-20.

More from Gnome.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2018-20781, published 2019-02-12. High severity, CVSS 7.8. EPSS: 1.5% chance of exploitation in the next 30 days. In pam/gkr-pam-module.c in GNOME Keyring before 3.27.2, the user's password is kept in a session-child process spawned from the LightDM daemon. This can expose the credential in cleartext.
• CVE-2012-6111, published 2019-12-20. High severity, CVSS 7.5. EPSS: 1.5% chance of exploitation in the next 30 days. gnome-keyring does not discard stored secrets when using gnome_keyring_lock_all_sync function