https://vulnerability.circl.lu/rss/recent/all/10 Most recent entries from all 2026-09-29T03:34:02.626234+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent entries. https://vulnerability.circl.lu/vuln/cve-2019-11460 CVE-2019-11460 2026-09-29T03:34:02.669880+00:00

An issue was discovered in GNOME gnome-desktop 3.26, 3.28, and 3.30 prior to 3.30.2.2, and 3.32 prior to 3.32.1.1. A compromised thumbnailer may escape the bubblewrap sandbox used to confine thumbnailers by using the TIOCSTI ioctl to push characters into the input buffer of the thumbnailer's controlling terminal, allowing an attacker to escape the sandbox if the thumbnailer has a controlling terminal. This is due to improper filtering of the TIOCSTI ioctl on 64-bit systems, similar to CVE-2019-10063.

 https://vulnerability.circl.lu/vuln/usn-3994-1 USN-3994-1 — gnome-desktop3 vulnerability 2026-09-29T03:34:02.669985+00:00

Affected: Ubuntu:18.04:LTS: gnome-desktop3

It was discovered that gnome-desktop incorrectly confined thumbnailers. If a user were tricked into downloading a malicious image file, a remote attacker could possibly combine this issue with another vulnerability to escape the sandbox and execute arbitrary code.