CVE catalog

CVE-2025-3839

epiphany-browser: CVE-2025-3839

[CVE catalog]

Severity
High · CVSS 8CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:N
Published
Source
[NVD] · [CVE record]
EPSS
0.39% · Oct 25, 2026

A flaw was found in Epiphany, a tool that allows websites to open external URL handler applications with minimal user interaction. This design can be misused to exploit vulnerabilities within those handlers, making them appear remotely exploitable. The browser fails to properly warn or gate this action, resulting in potential code execution on the client device via trusted UI behavior.

Vulnerable and fixed packages

Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.

DistributionPackageReleaseVersionStatus
Debianepiphany-browsersid51.1-1fixed
Debianepiphany-browserforky51.1-1fixed
Debianepiphany-browsertrixie48.5-0+deb13u1fixed
Debianepiphany-browserbookworm43.1-1vulnerable
Opensuseepiphanytumbleweed48.1-1.1fixed
Ubuntuepiphany-browser16.043.16.3-1ubuntu1vulnerable
Ubuntuepiphany-browser16.043.18.0-1ubuntu2vulnerable
Ubuntuepiphany-browser16.043.18.1-1ubuntu1vulnerable
Ubuntuepiphany-browser16.043.18.3-0ubuntu1vulnerable
Ubuntuepiphany-browser16.043.18.5-0ubuntu1vulnerable
Ubuntuepiphany-browser16.043.18.5-0ubuntu1.1vulnerable
Ubuntuepiphany-browser16.043.18.10-0ubuntu1vulnerable
Ubuntuepiphany-browser16.043.18.11-0ubuntu1vulnerable
Ubuntuepiphany-browser18.043.26.1-1ubuntu1vulnerable
Ubuntuepiphany-browser18.043.26.1-1ubuntu2vulnerable
Ubuntuepiphany-browser18.043.26.1-1ubuntu4vulnerable
Ubuntuepiphany-browser18.043.26.5.1-1ubuntu1vulnerable
Ubuntuepiphany-browser18.043.27.90-1ubuntu1vulnerable
Ubuntuepiphany-browser18.043.28.0.1-1ubuntu1vulnerable
Ubuntuepiphany-browser18.043.28.1-1ubuntu1vulnerable
Ubuntuepiphany-browser18.043.28.5-0ubuntu1vulnerable
Ubuntuepiphany-browser18.043.28.6-0ubuntu1vulnerable
Ubuntuepiphany-browser20.043.34.1-1vulnerable
Ubuntuepiphany-browser20.043.34.1-1build1vulnerable
Ubuntuepiphany-browser20.043.36.0-1vulnerable
Ubuntuepiphany-browser20.043.36.1-1vulnerable
Ubuntuepiphany-browser20.043.36.2-0ubuntu1vulnerable
Ubuntuepiphany-browser20.043.36.3-0ubuntu1vulnerable
Ubuntuepiphany-browser20.043.36.4-0ubuntu1vulnerable
Ubuntuepiphany-browser20.043.36.4-0ubuntu2vulnerable
Ubuntuepiphany-browser22.0441.0-1vulnerable
Ubuntuepiphany-browser22.0441.0-2vulnerable
Ubuntuepiphany-browser22.0441.2-1vulnerable
Ubuntuepiphany-browser22.0441.3-1vulnerable
Ubuntuepiphany-browser22.0442~beta-1vulnerable
Ubuntuepiphany-browser22.0442.0-1vulnerable
Ubuntuepiphany-browser22.0442.1-1vulnerable
Ubuntuepiphany-browser22.0442.1-1ubuntu1vulnerable
Ubuntuepiphany-browser22.0442.4-0ubuntu1vulnerable
Ubuntuepiphany-browser24.0445.0-1vulnerable
Ubuntuepiphany-browser24.0445.1-1vulnerable
Ubuntuepiphany-browser24.0446~alpha-1vulnerable
Ubuntuepiphany-browser24.0446~beta-1vulnerable
Ubuntuepiphany-browser24.0446.0-1vulnerable
Ubuntuepiphany-browser24.0446.0-2build1vulnerable
Ubuntuepiphany-browser24.0446.5-0ubuntu1vulnerable
Ubuntuepiphany-browser25.1048.0-1vulnerable
Ubuntuepiphany-browser25.1048.3-1vulnerable
Ubuntuepiphany-browser25.1048.3-2vulnerable
Ubuntuepiphany-browser25.1048.3-2build1vulnerable
Ubuntuepiphany-browser25.1048.5-1vulnerable
Ubuntuepiphany-browser25.1048.5-3vulnerable

Fixed-version evidence

DistributionPackageTypeReleaseFixed versionUrgencyOriginBugs
Debianepiphany-browsersourcesid48.1-1not yet assignedNot reportedNot reported
Debianepiphany-browsersourceforky48.1-1not yet assignedNot reportedNot reported
Debianepiphany-browsersourcetrixie48.1-1not yet assignedNot reportedNot reported
Debianepiphany-browsersourcebookworm(unfixed)not yet assignedNot reportedNot reported
Opensuseepiphanyrpmtumbleweed48.1-1.1Not reportedOPENSUSE-SU-2025:15011-1Not reported

Notes

[bookworm] epiphany-browser: Minor issue

OpenFactory catalog packages

[Debian 12 (Bookworm)]

  • [epiphany-browser]Affected
    Details (2)

    • 43.1-1 · amd64 · bookworm

      Affected

      dsa · epiphany-browser · debian · bookworm; dsa · epiphany-browser · debian · 12

    • 43.1-1 · arm64 · bookworm

      Affected

      dsa · epiphany-browser · debian · bookworm; dsa · epiphany-browser · debian · 12

  • [epiphany-browser-data]Affected

    Source package: [epiphany-browser]

    Details (2)

    • 43.1-1 · all · bookworm

      Affected

      dsa · epiphany-browser · debian · bookworm; dsa · epiphany-browser · debian · 12

    • 43.1-1 · all · bookworm

      Affected

      dsa · epiphany-browser · debian · bookworm; dsa · epiphany-browser · debian · 12

[openSUSE Tumbleweed]

  • [epiphany-branding-upstream]Unknown

    Source package: [epiphany]

    Details (1)

    • 50.6-2.1 · noarch · tumbleweed

      Unknown · Fixed: 48.1-1.1

      Version impact unknown

      dsa · epiphany · opensuse · tumbleweed

  • [epiphany-lang]Unknown

    Source package: [epiphany]

    Details (1)

    • 50.6-2.1 · noarch · tumbleweed

      Unknown · Fixed: 48.1-1.1

      Version impact unknown

      dsa · epiphany · opensuse · tumbleweed

  • [gnome-shell-search-provider-epiphany]Unknown

    Source package: [epiphany]

    Details (1)

    • 50.6-2.1 · x86_64 · tumbleweed

      Unknown · Fixed: 48.1-1.1

      Version impact unknown

      dsa · epiphany · opensuse · tumbleweed

  • [epiphany]Fixed

    Source package: [epiphany]

    Details (1)

    • 50.6-2.1 · x86_64 · tumbleweed

      Fixed · Fixed: 48.1-1.1

      dsa · epiphany · opensuse · tumbleweed

[Debian 13 (Trixie)]

  • [epiphany-browser]Fixed
    Details (2)

    • 48.5-0+deb13u1 · amd64 · trixie

      Fixed · Fixed: 48.1-1

      dsa · epiphany-browser · debian · 13

    • 48.5-0+deb13u1 · arm64 · trixie

      Fixed · Fixed: 48.1-1

      dsa · epiphany-browser · debian · 13

  • [epiphany-browser-data]Fixed

    Source package: [epiphany-browser]

    Details (2)

    • 48.5-0+deb13u1 · all · trixie

      Fixed · Fixed: 48.1-1

      dsa · epiphany-browser · debian · 13

    • 48.5-0+deb13u1 · all · trixie

      Fixed · Fixed: 48.1-1

      dsa · epiphany-browser · debian · 13

Observed:

References

[Debian Security Tracker] · [FIRST EPSS] · [OSV Package Vulnerability Database] · [Red Hat security advisories and VEX] · [SUSE security advisories and VEX]