Gnome Gvfs vulnerabilities

10 CVEs affecting Gnome Gvfs, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2026-88924, published 2026-09-10.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2019-12449, published 2019-05-29. Medium severity, CVSS 5.7. EPSS: 1.8% chance of exploitation in the next 30 days. An issue was discovered in GNOME gvfs 1.29.4 through 1.41.2. daemon/gvfsbackendadmin.c mishandles a file's user and group ownership during move (and copy with G_FILE_COPY_ALL_METADATA) operations…
CVE-2019-12447, published 2019-05-29. High severity, CVSS 7.3. EPSS: 1.8% chance of exploitation in the next 30 days. An issue was discovered in GNOME gvfs 1.29.4 through 1.41.2. daemon/gvfsbackendadmin.c mishandles file ownership because setfsuid is not used.
CVE-2019-12448, published 2019-05-29. High severity, CVSS 8.1. EPSS: 1.8% chance of exploitation in the next 30 days. An issue was discovered in GNOME gvfs 1.29.4 through 1.41.2. daemon/gvfsbackendadmin.c has race conditions because the admin backend doesn't implement query_info_on_read/write.
CVE-2026-84269, published 2026-09-01. Medium severity, CVSS 6.5. EPSS: 0.5% chance of exploitation in the next 30 days. A flaw was found in the AFP backend in gvfs. When mounting a share, a malicious AFP server can cause the DSI read path to process a length that exceeds the size requested by the client. The function…
CVE-2019-12795, published 2019-06-11. High severity, CVSS 7.8. EPSS: 0.4% chance of exploitation in the next 30 days. daemon/gvfsdaemon.c in gvfsd from GNOME gvfs before 1.38.3, 1.40.x before 1.40.2, and 1.41.x before 1.41.3 opened a private D-Bus server socket without configuring an authorization rule. A local…
CVE-2026-84267, published 2026-09-01. Medium severity, CVSS 4.3. EPSS: 0.4% chance of exploitation in the next 30 days. A flaw was found in the SFTP backend in gvfs. When mounting a share, a malicious SFTP server can cause read_string() to allocate a buffer with a certain length but the function does not verify that…
CVE-2019-3827, published 2019-03-25. High severity, CVSS 7.0. EPSS: 0.4% chance of exploitation in the next 30 days. An incorrect permission check in the admin backend in gvfs before version 1.39.4 was found that allows reading and modify arbitrary files by privileged users without asking for password when no…
CVE-2026-84268, published 2026-09-01. High severity, CVSS 8.8. EPSS: 0.4% chance of exploitation in the next 30 days. A flaw was found in the SFTP backend in gvfs. When mounting a share and reading a file, a malicious SFTP server can cause read_reply() to process a length that exceeds the size requested by the…
CVE-2026-84270, published 2026-09-01. Medium severity, CVSS 4.3. EPSS: 0.2% chance of exploitation in the next 30 days. A flaw was found in the MTP backend in gvfs. When reading a file from a mounted MTP device, do_read() in gvfsbackendmtp.c trusts the data length returned by the device without limiting it to the…
CVE-2026-88924, published 2026-09-10. High severity, CVSS 7.0. EPSS: 0.2% chance of exploitation in the next 30 days. A flaw was found in the admin backend of gvfs. The privileged gvfsd-admin daemon changes the ownership of newly created private D-Bus sockets by calling the link-following chown() function on a…