CVE Feed

    Dashboard / CVE / CVE-2013-7220

    CVE-2013-7220

    js/ui/screenShield.js in GNOME Shell (aka gnome-shell) before 3.8 allows physically proximate attackers to execute arbitrary commands by leveraging an unattended workstation with the keyboard focus on the Activities search.

    Published:Nov 14, 2013
    Last Modified:Apr 12, 2025
    EPS:Apr 29, 2014
    EPSS Score:0.00097
    CVSS Score:4.6

    Affected Products

    Vendor
    Gnome
    Product
    Gnome-shell

    Exploits

    No exploit reference

    Common Weakness Enumeration

    No CWE recorded yet

    Common Attack Pattern Enumeration and Classification (CAPEC)

    No CAPEC recorded yet

    Related CVEs

    CVE-2023-43090 (CVSS 5.5) — A vulnerability was found in GNOME Shell. GNOME Shell's lock screen allows an unauthenticated local user to vi…
    CVE-2021-3982 (CVSS 5.5) — Linux distributions using CAP_SYS_NICE for gnome-shell may be exposed to a privilege escalation issue. An atta…
    CVE-2021-20315 (CVSS 6.1) — A locking protection bypass flaw was found in some versions of gnome-shell as shipped within CentOS Stream 8, …
    CVE-2020-17489 (CVSS 4.3) — An issue was discovered in certain configurations of GNOME gnome-shell through 3.36.4. When logging out of an …
    CVE-2019-3820 (CVSS 4.3) — It was discovered that the gnome-shell lock screen since version 3.15.91 did not properly restrict all context…
    CVE-2017-8288 (CVSS 8.1) — gnome-shell 3.22 through 3.24.1 mishandles extensions that fail to reload, which can lead to leaving extension…
    CVE-2014-7300 (CVSS 7.2) — GNOME Shell 3.14.x before 3.14.1, when the Screen Lock feature is used, does not limit the aggregate memory co…
    CVE-2013-7221 (CVSS 4.6) — The automatic screen lock functionality in GNOME Shell (aka gnome-shell) before 3.10 does not prevent access t…
    CVE-2012-4427 (CVSS 6.8) — The gnome-shell plugin 3.4.1 in GNOME allows remote attackers to force the download and installation of arbitr…
    CVE-2010-4000 (CVSS 6.9) — gnome-shell in GNOME Shell 2.31.5 places a zero-length directory name in the LD_LIBRARY_PATH, which allows loc…

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High