Predictive Vulnerability Intelligence.

Product

  • Product
  • Pricing
  • Documentation

Company

  • About
  • Partnerships
  • Blog
  • Support

Legal

  • Terms
  • Privacy
  • Data Licensing

© 2026 FAUCET Technologies LLC. All rights reserved.

CVE-2020-36774

17
FAUCET Score

CVE-2020-36774 describes a denial-of-service vulnerability affecting GNOME Glade versions prior to 3.38.1 and 3.39.x before 3.40.0, stemming from improper widget rebuilding in the GladeGtkBox plugin. This medium-severity vulnerability (CVSS 5.5) has a local attack vector, low attack complexity, and can lead to an application crash, resulting in high availability impact. There is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage surrounding this CVE.

Impacted Technologies

VendorProductVersion(s)CPE
< 3.38.1CPE matchmatch criteria
cpe:2.3:a:gnome:glade:*:*:*:*:*:*:*:*
>= 3.39.0, < 3.40.0CPE matchmatch criteria
cpe:2.3:a:gnome:glade:*:*:*:*:*:*:*:*

CVSS Data

CVSS version used by this source: 3.1

5.5MEDIUM

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
Exploitability Score
1.8
Impact Score
3.6
CvssVersion
3.1

Exploit Intelligence

EPSS Score
0.21%
Probability of exploitation in next 30 days
EPSS Percentile
11.9%
Percentile rank of EPSS score among Peer Group
As of 2026-07-27
Model: v2026.06.15
This CVE's current EPSS score of 0.0021 is in the 15th percentile among its peer group of 5,758 CVEs.

Social Chatter

The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.0 Bluesky, 0.0 Mastodon, and 0.1 GitHub mentions.

Media Mentions

No media coverage found for this CVE.

The average CVE in this peer group has 0.1 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.

Remediation

Vendor Patches (2)

redhatvendor investigatingvia redhat_api
Product: Red Hat Enterprise Linux 8Fixed in: glade
redhatvendor investigatingvia redhat_api
Product: Red Hat Enterprise Linux 9Fixed in: glade

Vendor Advisories (1)

redhatCVE-2020-36774Low

glade: segmentation fault in glade_gtk_box_post_create()

Feb 19, 2024

References

gitlab.gnome.org / GNOME/glade/-/commit/7acdd3c6f6934f47b8974ebc2190a59ea5d2ed17
Patch
gitlab.gnome.org / GNOME/glade/-/issues/479
Issue Tracking