https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2022-37290.htmlhttps://patchthecve.com/cve/CVE-2022-37290.htmlWed, 17 Jun 2026 04:54:49 +0000MEDIUM 5.5: GNOME Nautilus 42.2 allows a NULL pointer dereference and get_basename application crash via a pasted ZIP archive.https://patchthecve.com/cve/CVE-2019-11461.htmlhttps://patchthecve.com/cve/CVE-2019-11461.htmlWed, 17 Jun 2026 02:12:56 +0000HIGH 7.8: An issue was discovered in GNOME Nautilus 3.30 prior to 3.30.6 and 3.32 prior to 3.32.1. A compromised thumbnailer may escape the bubblewrap sandbox used to confine thumbnailers by using the TIOCSTI ioctl to push characters into the input buffer of the thumbnailer's controlling terminal, allowing anhttps://patchthecve.com/cve/CVE-2017-12447.htmlhttps://patchthecve.com/cve/CVE-2017-12447.htmlWed, 17 Jun 2026 01:03:19 +0000HIGH 7.8: GdkPixBuf (aka gdk-pixbuf), possibly 2.32.2, as used by GNOME Nautilus 3.14.3 on Ubuntu 16.04, allows attackers to cause a denial of service (stack corruption) or possibly have unspecified other impact via a crafted file folder.https://patchthecve.com/cve/CVE-2017-14604.htmlhttps://patchthecve.com/cve/CVE-2017-14604.htmlWed, 17 Jun 2026 01:06:28 +0000MEDIUM 6.5: GNOME Nautilus before 3.23.90 allows attackers to spoof a file type by using the .desktop file extension, as demonstrated by an attack in which a .desktop file's Name field ends in .pdf but this file's Exec field launches a malicious "sh -c" command. In other words, Nautilus provides no UI indicatiohttps://patchthecve.com/cve/CVE-2002-0157.htmlhttps://patchthecve.com/cve/CVE-2002-0157.htmlTue, 16 Jun 2026 21:56:54 +0000MEDIUM 4.6: Nautilus 1.0.4 and earlier allows local users to overwrite arbitrary files via a symlink attack on the .nautilus-metafile.xml metadata file.