CVE-2023-43090

5.5 mediumEPSS 0.3%

Medium (5.5). EPSS 0.3% chance of exploitation in the next 30 days.

A vulnerability was found in GNOME Shell. GNOME Shell's lock screen allows an unauthenticated local user to view windows of the locked desktop session by using keyboard shortcuts to unlock the restricted functionality of the screenshot tool.

Severity

CVSS 3.1

5.5 medium

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

EPSS: 0.3% chance of exploitation in the next 30 days; higher than 22% of CVEs (scores of 2026-10-31)
CWE: CWE-862
Published: 2023-09-22
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

fedoraproject:fedora
gnome:gnome-shell

References

https://access.redhat.com/security/cve/CVE-2023-43090
https://bugzilla.redhat.com/show_bug.cgi?id=2239087
https://gitlab.gnome.org/GNOME/gnome-shell/-/issues/6990
https://gitlab.gnome.org/GNOME/gnome-shell/-/merge_requests/2944
https://access.redhat.com/security/cve/CVE-2023-43090

Check your stack JSON