GNOME gvfs

5 known vulnerabilities in GNOME gvfs, with patch priority, exploit likelihood and the news covering them.

Latest vulnerabilities

CVE-2026-88924 CVSS 7.0 high A flaw was found in the admin backend of gvfs. The privileged gvfsd-admin daemon changes the ownership of newly created private D-Bus…
CVE-2026-84270 CVSS 4.3 medium A flaw was found in the MTP backend in gvfs. When reading a file from a mounted MTP device, do_read() in gvfsbackendmtp.c trusts the data…
CVE-2026-84269 CVSS 6.5 medium A flaw was found in the AFP backend in gvfs. When mounting a share, a malicious AFP server can cause the DSI read path to process a length…
CVE-2026-84268 CVSS 8.8 high A flaw was found in the SFTP backend in gvfs. When mounting a share and reading a file, a malicious SFTP server can cause read_reply() to…
CVE-2026-84267 CVSS 4.3 medium A flaw was found in the SFTP backend in gvfs. When mounting a share, a malicious SFTP server can cause read_string() to allocate a buffer…