CVE-2026-91786

CVE-2026-91786 is an out-of-bounds read in GNOME Shell that occurs when processing icons from a remote search provider via D-Bus . The root cause is a missing validation of the icon's declared dimensions against the actual data buffer size. A malicious or compromised remote search provider can su...