Vendor
Epiphany
Products
1
CVEs
4
Across products
4
Status
Private
Products
1- 4 CVEs
Recent CVEs
4| CVE | Vendor / Product | Sev | Risk | CVSS | EPSS | KEV | Published | Description |
|---|---|---|---|---|---|---|---|---|
| CVE-2025-3839 | Hig | 0.52 | 8.0 | 0.00 | Jan 23, 2026 | A flaw was found in Epiphany, a tool that allows websites to open external URL handler applications with minimal user interaction. This design can be misused to exploit vulnerabilities within those handlers, making them appear remotely exploitable. The browser fails to properly… | ||
| CVE-2026-77682 | imp | 0.46 | 7.1 | — | Aug 21, 2026 | epiphany: epiphany: JavaScript code injection in autofill via unsanitized CSS selector from element id | ||
| CVE-2026-77679 | mod | 0.36 | 5.5 | — | Aug 21, 2026 | epiphany: epiphany: path traversal in WebExtension XPI extraction (ZIP slip) | ||
| CVE-2008-5985 | 0.00 | — | 0.00 | Jan 28, 2009 | Untrusted search path vulnerability in the Python interface in Epiphany 2.22.3, and possibly other versions, allows local users to execute arbitrary code via a Trojan horse Python file in the current working directory, related to a vulnerability in the PySys_SetArgv function… |
- risk 0.52cvss 8.0epss 0.00
A flaw was found in Epiphany, a tool that allows websites to open external URL handler applications with minimal user interaction. This design can be misused to exploit vulnerabilities within those handlers, making them appear remotely exploitable. The browser fails to properly…
- risk 0.46cvss 7.1epss —
epiphany: epiphany: JavaScript code injection in autofill via unsanitized CSS selector from element id
- risk 0.36cvss 5.5epss —
epiphany: epiphany: path traversal in WebExtension XPI extraction (ZIP slip)
- CVE-2008-5985Jan 28, 2009risk 0.00cvss —epss 0.00
Untrusted search path vulnerability in the Python interface in Epiphany 2.22.3, and possibly other versions, allows local users to execute arbitrary code via a Trojan horse Python file in the current working directory, related to a vulnerability in the PySys_SetArgv function…