PatchTheCVExfce vulnerabilities
Recent CVEs affecting xfce products. 3 tracked.
xfce has 3 tracked vulnerabilities, 2 critical. A fixed release or vendor patch exists for 3. Most recent: 2022-11-09. Highest priority: CVE-2022-45062 (score 63/100).
- CVE-2022-45062 CRITICAL 9.8 UPGRADE MITIGATE In Xfce xfce4-settings before 4.16.4 and 4.17.x before 4.17.1, there is an argument injection vulnerability in
- CVE-2022-32278 HIGH 8.8 UPGRADE MITIGATE XFCE 4.16 allows attackers to execute arbitrary code because xdg-open can execute a .desktop file on an attack
- CVE-2021-32563 CRITICAL 9.8 UPGRADE An issue was discovered in Thunar before 4.16.7 and 4.17.x before 4.17.2
FAQ
How do I fix xfce vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is xfce being exploited right now?
None of the tracked xfce CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which xfce CVE should I patch first?
CVE-2022-45062 currently ranks highest (63/100): In Xfce xfce4-settings before 4.16.4 and 4.17.x before 4.17.1, there is an argument injection vulnerability in.