The vulnerability in the web browser Epiphany, related to access control deficiencies, allows attackers to disclose protected information.

The vulnerability of the Web browser Epiphany is related to access control deficiencies. Exploiting this vulnerability can allow a malicious actor, operating remotely, to disclose protected information...

OESA-2023-1175 epiphany security update

Epiphany is the web browser for the GNOME desktop. Its goal is to be simple and easy to use. Epiphany ties together many GNOME components in order to let you focus on the Web content, instead of the browser application. Security Fixes: In Epiphany aka GNOME Web through 43.0, untrusted web content...

Privilege Escalation

epiphany-browser is vulnerable to Privilege Escalation. The vulnerability exists because the untrusted web content can trick users into exfiltrating passwords because autofill occurs in sandboxed contexts...

SUSE CVE-2023-26081

In Epiphany aka GNOME Web through 43.0, untrusted web content can trick users into exfiltrating passwords, because autofill occurs in sandboxed contexts...

CVE-2023-26081

In Epiphany aka GNOME Web through 43.0, untrusted web content can trick users into exfiltrating passwords, because autofill occurs in sandboxed contexts...

SUSE CVE-2005-0238

The International Domain Name IDN support in Epiphany allows remote attackers to spoof domain names using punycode encoded domain names that are decoded in URLs and SSL certificates in a way that uses homograph characters from other character sets, which facilitates phishing attacks...

SUSE CVE-2018-11396

ephy-session.c in libephymain.so in GNOME Web aka Epiphany through 3.28.2.1 allows remote attackers to cause a denial of service application crash via JavaScript code that triggers access to a NULL URL, as demonstrated by a crafted window.open call...

SUSE CVE-2021-45085

XSS can occur in GNOME Web aka Epiphany before 40.4 and 41.x before 41.1 via an about: page, as demonstrated by ephy-about:overview when a user visits an XSS payload page often enough to place that page on the Most Visited list...

The vulnerability of the ephy-about:overview browser scripting implementation allows attackers to perform cross-site scripting attacks.

The vulnerability of the ephy-about:overview web browser Epiphany implementation is related to the lack of measures taken to protect the structure of web pages. Exploitation of this vulnerability allows a remote attacker to perform cross-site scripting attacks...

Ubuntu: Security Advisory (USN-5561-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Ubuntu: Security Advisory (USN-155-2)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] [DLA 3074-1] epiphany-browser security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-3074-1 [email protected] https://www.debian.org/lts/security/ Emilio Pozuelo Monfort August 18, 2022 https://wiki.debian.org/LTS -...

DLA-3074-1 epiphany-browser - security update

Bulletin has no description...

Debian: Security Advisory (DSA-5208-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian dla-3074 : epiphany-browser - security update

The remote Debian 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-3074 advisory. - ------------------------------------------------------------------------- Debian LTS Advisory DLA-3074-1 [email protected]...

DSA-5208-1 epiphany-browser - security update

Bulletin has no description...

USN-5561-1 epiphany-browser vulnerabilities

It was discovered that GNOME Web incorrectly filtered certain strings. A remote attacker could use this issue to perform cross-site scripting XSS attacks. This issue only affected Ubuntu 20.04 LTS. CVE-2021-45085, CVE-2021-45086, CVE-2021-45087 It was discovered that GNOME Web incorrectly handled...

Buffer Overflow

epiphany-browser is vulnerable to buffer overflow. The vulnerability exists due to a lack of validation of the number of bytes for a UTF-8 ellipsis character in ephystringshorten in the UI process via a long page title...

Debian: Security Advisory (DSA-5042-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian DSA-5042-1 : epiphany-browser - security update

The remote Debian 11 host has packages installed that are affected by multiple vulnerabilities as referenced in the dsa-5042 advisory. - XSS can occur in GNOME Web aka Epiphany before 40.4 and 41.x before 41.1 via an about: page, as demonstrated by ephy-about:overview when a user visits an XSS...