Gnome Localsearch vulnerabilities

3 CVEs affecting Gnome Localsearch, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2026-1767, published 2026-06-16.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2026-1767, published 2026-06-16. High severity, CVSS 8.1. EPSS: 0.2% chance of exploitation in the next 30 days. A flaw was found in the GNOME localsearch (previously known as tracker-miners) MP3 Extractor `tracker-extract-mp3` component. A remote attacker could exploit this heap buffer overflow vulnerability…
CVE-2026-1764, published 2026-06-16. Medium severity, CVSS 5.6. EPSS: 0.2% chance of exploitation in the next 30 days. A flaw was found in GNOME localsearch (previously known as tracker-miners) MP3 Extractor. When processing specially crafted MP3 files containing ID3v2.4 tags, a missing bounds check in the…
CVE-2026-1766, published 2026-06-16. Medium severity, CVSS 6.1. EPSS: 0.2% chance of exploitation in the next 30 days. A flaw was found in GNOME localsearch (previously known as tracker-miners) MP3 Extractor, specifically within the tracker-extract-mp3 component. This heap buffer overflow vulnerability occurs when…