GVfs vulnerabilities allow remote information disclosure and denial of service
GVfs mishandling of SFTP, AFP and MTP data could let remote attackers obtain sensitive information or cause denial of service.
3 stories, newest first · one card per story
GVfs mishandling of SFTP, AFP and MTP data could let remote attackers obtain sensitive information or cause denial of service.
Ubuntu warns of two GVfs flaws: malicious SFTP input may yield code execution, and a local bug can grant root.

GNOME 50.5 patches gvfs CVE-2026-88924, Epiphany JavaScript injection and ZIP-slip extension flaws, plus use-after-free bugs in librsvg and GDM.
Today 1.6K readers · 2.4K views · 776 reads · all time 189K views