Changeflow GovPing Data Privacy & Cybersecurity GIMP Multiple Vulnerabilities Allow Code Execut...
Priority review Notice Added Final

GIMP Multiple Vulnerabilities Allow Code Execution and Information Disclosure

Favicon for wid.cert-bund.de CERT-Bund Security Advisories
Published
Detected
Email

Summary

CERT-Bund issued a security advisory (WID-SEC-2026-1144) identifying multiple vulnerabilities in GIMP (GNU Image Manipulation Program) with a CVSS Base Score of 7.3 (high) and Temporal Score of 6.7 (medium). The vulnerabilities affect versions running on Windows, UNIX, and Linux operating systems. An attacker could exploit these flaws to potentially execute arbitrary code, disclose confidential information, manipulate data, or cause a denial-of-service condition.

Published by CERT-Bund on wid.cert-bund.de . Detected, standardized, and enriched by GovPing. Review our methodology and editorial standards .
View original document View source feed page

What changed

CERT-Bund published a security advisory disclosing multiple vulnerabilities in the open-source image editing software GIMP. The vulnerabilities carry a CVSS Base Score of 7.3 (high severity) and affect all major operating system platforms including Windows, UNIX, and Linux. The advisory indicates remote attack is not applicable.

Organizations and individuals using GIMP should monitor for software updates from the GIMP project to obtain patches addressing these vulnerabilities. System administrators responsible for environments with GIMP installations should evaluate the risk to their specific configurations and apply mitigation measures as they become available.

Archived snapshot

Apr 16, 2026

GovPing captured this document from the original source. If the source has since changed or been removed, this is the text as it existed at that time.

[WID-SEC-2026-1144] GIMP: Mehrere Schwachstellen CVSS Base Score 7.3 (hoch) CVSS Temporal Score 6.7 (mittel) Remoteangriff nein Datum 15.04.2026 Stand 16.04.2026 Mitigation nein

Betroffene Systeme

Betriebssystem

  • Sonstiges
  • UNIX
  • Windows

Produktbeschreibung

Das "Gnu Image Manipulation Program" ist eine Open Source Software zum Bearbeiten von Bildern. Es ist auch Bestandteil vieler Linux Distributionen.

Produkte

15.04.2026
- Open Source GIMP

Angriff

Angriff

Ein Angreifer kann mehrere Schwachstellen in GIMP ausnutzen, um potenziell beliebigen Code auszuführen, vertrauliche Informationen offenzulegen, Daten zu manipulieren oder einen Denial-of-Service-Zustand zu verursachen. CVE Informationen Versionshistorie Feedback zum Advisory geben

Related changes

Favicon for wid.cert-bund.de OpenClaw Multiple Critical Vulnerabilities Allow Remote Code Execution
Priority review Apr 14, 2026 • CERT-Bund Security Advisories • Data Privacy & Cybersecurity
Favicon for wid.cert-bund.de Adobe Connect Multiple Critical Vulnerabilities Allowing Arbitrary Code Execution, CVSS 9.6
Priority review Apr 16, 2026 • CERT-Bund Security Advisories • Data Privacy & Cybersecurity
Favicon for wid.cert-bund.de WID-SEC-2026-1103: Critical Microsoft SQL Server Vulnerabilities Allow Code Execution and Privilege Elevation
Urgent Apr 15, 2026 • CERT-Bund Security Advisories • Data Privacy & Cybersecurity

Get daily alerts for CERT-Bund Security Advisories

Daily digest delivered to your inbox.

Free. Unsubscribe anytime.

Source

Favicon for wid.cert-bund.de
CERT-Bund Security Advisories wid.cert-bund.de/content/public/securityAdvisory/rss
Data Privacy & Cybersecurity

About this page

What is GovPing?

Every important government, regulator, and court update from around the world. One place. Real-time. Free. Our mission

What's from the agency?

Source document text, dates, docket IDs, and authority are extracted directly from CERT-Bund.

What's AI-generated?

The summary, classification, recommended actions, deadlines, and penalty information are AI-generated from the original text and may contain errors. Always verify against the source document.

Last updated

Press inquiries →

Classification

Agency
CERT-Bund
Published
April 15th, 2026
Instrument
Notice
Legal weight
Non-binding
Stage
Final
Change scope
Substantive
Document ID
WID-SEC-2026-1144

Who this affects

Applies to
Technology companies Consumers
Industry sector
5112 Software & Technology
Activity scope
Vulnerability disclosure Software patching
Geographic scope
Germany DE

Taxonomy

Primary area
Cybersecurity
Operational domain
IT Security
Compliance frameworks
NIST CSF
Topics
Software & Technology Data Privacy

Browse Categories

Agriculture & Food Safety 65 AI Regulation 3 Banking & Finance 330 Consumer Protection 61 Courts & Legal 361 Data Privacy & Cybersecurity 77 Defense & National Security 51 Education 24 Energy 100 Environment 86 Environmental & Energy 26 Environmental Regulation 7 Financial Regulation 2 Government & Legislation 278 Government Operations 107 Healthcare 142 Healthcare & Life Sciences 63 Housing 16 Immigration 8 Immigration & Border Control 2 Insurance 66 Labor & Employment 116 Legal & Judicial 26 Pharma & Drug Safety 101 Pharma & Healthcare 1 Public Health 2 Real Estate & Housing 33 Sanctions & Export Controls 1 Securities & Investments 27 Securities & Markets 103 Securities Regulation 6 Tax 65 Tax & Revenue 9 Telecom & Technology 47 Trade & Commerce 3 Trade & Sanctions 135 Transportation 77

Get alerts for this source

We'll email you when CERT-Bund Security Advisories publishes new changes.

Free. Unsubscribe anytime.

You're subscribed!