gnome evince

Name: gnome evince
Brand: gnome

productUS

cpe:2.3:a:gnome:evince:*:*:*:*:*:*:*:*

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

KEV-listed

critical

by severity

0critical3high4medium0low

updated 2026-10-26

vulnerabilities (7)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2017-1000083US	high7.8	51.1% (99th)	Exploit	no fix	2017-09-05	≤ 3.24.0
CVE-2011-0433US	medium6.8	4.21% (91st)	—	no fix	2012-11-19	—
CVE-2011-5244US	medium6.8	3.36% (89th)	—	no fix	2012-11-19	—
CVE-2019-1010006US	high7.8	2.09% (81st)	—	no fix	2019-07-15	= 3.26.0
CVE-2019-11459US	medium5.5	1.44% (73rd)	—	no fix	2019-04-22	≤ 3.32.0
CVE-2017-1000159US	high7.8	1.41% (72nd)	—	3.25.91	2017-11-27	< 3.25.91
CVE-2013-3718US	medium5.5	1.15% (67th)	—	no fix	2019-11-01	2 versions

The flaw types (CWEs) most of these CVEs share.

CWE-119Improper Restriction of Operations within the Bounds of a Memory Buffer2 CVEs
CWE-78Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')2 CVEs
CWE-122Heap-based Buffer Overflow1 CVEs
CWE-125Out-of-bounds Read1 CVEs
CWE-189CWE-1891 CVEs
CWE-190Integer Overflow or Wraparound1 CVEs
CWE-20Improper Input Validation1 CVEs
CWE-733Compiler Optimization Removal or Modification of Security-critical Code1 CVEs

Which sources assert this record, and when.

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.