{"id":"USN-8971-1","summary":"gnome-shell vulnerability","details":"It was discovered that GNOME Shell did not properly validate icon\ndimensions when processing icons from a remote search provider. An\nattacker could possibly use this issue to cause GNOME Shell to crash,\nresulting in a denial of service, or expose sensitive information from\nmemory.","modified":"2026-11-04T03:43:10.422376083Z","published":"2026-11-03T14:13:50Z","related":["UBUNTU-CVE-2026-91786"],"upstream":["CVE-2026-91786","UBUNTU-CVE-2026-91786"],"references":[{"type":"ADVISORY","url":"https://ubuntu.com/security/notices/USN-8971-1"},{"type":"REPORT","url":"https://ubuntu.com/security/CVE-2026-91786"}],"affected":[{"package":{"name":"gnome-shell","ecosystem":"Ubuntu:22.04:LTS","purl":"pkg:deb/ubuntu/gnome-shell?arch=source&distro=jammy"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"42.9-0ubuntu2.4"}]}],"versions":["40.5-1ubuntu2","41.3-1ubuntu1","42~beta-1ubuntu2","42~beta-1ubuntu3","42.0-1ubuntu1","42.0-2ubuntu1","42.1-0ubuntu0.1","42.2-0ubuntu0.2","42.4-0ubuntu0.22.04.1","42.5-0ubuntu1","42.9-0ubuntu2","42.9-0ubuntu2.1","42.9-0ubuntu2.2","42.9-0ubuntu2.3"],"ecosystem_specific":{"binaries":[{"binary_version":"42.9-0ubuntu2.4","binary_name":"gnome-shell"},{"binary_name":"gnome-shell-common","binary_version":"42.9-0ubuntu2.4"},{"binary_name":"gnome-shell-extension-prefs","binary_version":"42.9-0ubuntu2.4"}],"availability":"No subscription required"},"database_specific":{"cves_map":{"cves":[{"severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:H"},{"score":"medium","type":"Ubuntu"}],"id":"CVE-2026-91786"}],"ecosystem":"Ubuntu:22.04:LTS"},"source":"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/usn/USN-8971-1.json"}},{"package":{"name":"gnome-shell","ecosystem":"Ubuntu:24.04:LTS","purl":"pkg:deb/ubuntu/gnome-shell?arch=source&distro=noble"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"46.0-0ubuntu6~24.04.17"}]}],"versions":["45.0-1ubuntu2","45.1-1ubuntu1","45.2-1ubuntu1","45.3-1ubuntu1","46.0-0ubuntu3.1","46.0-0ubuntu4","46.0-0ubuntu5","46.0-0ubuntu5.1","46.0-0ubuntu6~24.04.1","46.0-0ubuntu6~24.04.3","46.0-0ubuntu6~24.04.4","46.0-0ubuntu6~24.04.5","46.0-0ubuntu6~24.04.6","46.0-0ubuntu6~24.04.8","46.0-0ubuntu6~24.04.9","46.0-0ubuntu6~24.04.11","46.0-0ubuntu6~24.04.12","46.0-0ubuntu6~24.04.13","46.0-0ubuntu6~24.04.14","46.0-0ubuntu6~24.04.15","46.0-0ubuntu6~24.04.16"],"ecosystem_specific":{"binaries":[{"binary_name":"gnome-shell","binary_version":"46.0-0ubuntu6~24.04.17"},{"binary_version":"46.0-0ubuntu6~24.04.17","binary_name":"gnome-shell-common"},{"binary_name":"gnome-shell-extension-prefs","binary_version":"46.0-0ubuntu6~24.04.17"}],"availability":"No subscription required"},"database_specific":{"cves_map":{"cves":[{"id":"CVE-2026-91786","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:H"},{"score":"medium","type":"Ubuntu"}]}],"ecosystem":"Ubuntu:24.04:LTS"},"source":"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/usn/USN-8971-1.json"}},{"package":{"name":"gnome-shell","ecosystem":"Ubuntu:26.04:LTS","purl":"pkg:deb/ubuntu/gnome-shell?arch=source&distro=resolute"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"50.1-0ubuntu1.5"}]}],"versions":["49.0-1ubuntu1","49.1-5ubuntu1","49.2-1ubuntu1","49.2-1ubuntu2","50~beta-0ubuntu3","50.0-0ubuntu2","50.0-1ubuntu1","50.0-1ubuntu2","50.0-1ubuntu3","50.1-0ubuntu1","50.1-0ubuntu1.1","50.1-0ubuntu1.2","50.1-0ubuntu1.3","50.1-0ubuntu1.4"],"ecosystem_specific":{"binaries":[{"binary_name":"gnome-shell","binary_version":"50.1-0ubuntu1.5"},{"binary_name":"gnome-shell-common","binary_version":"50.1-0ubuntu1.5"},{"binary_version":"50.1-0ubuntu1.5","binary_name":"gnome-shell-extension-prefs"}],"availability":"No subscription required"},"database_specific":{"source":"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/usn/USN-8971-1.json","cves_map":{"cves":[{"id":"CVE-2026-91786","severity":[{"score":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:H","type":"CVSS_V3"},{"type":"Ubuntu","score":"medium"}]}],"ecosystem":"Ubuntu:26.04:LTS"}}}],"schema_version":"1.9.2"}