CVE-2018-20681: mate-desktop mate-screensaver
Vulnerability summary
CVE-2018-20681 is a medium (CVSS 6.1) vulnerability in mate-desktop mate-screensaver. EPSS estimates a 0.58% chance of exploitation in the next 30 days, higher than 46.8% of scored vulnerabilities. 1 public exploit is recorded.
Timeline
- 09-01-2019PublishedVulnerability first disclosed.
- 05-08-2024Last modifiedVulnerability information updated.
Description
mate-screensaver before 1.20.2 in MATE Desktop Environment allows physically proximate attackers to view screen content and possibly control applications. By unplugging and re-plugging or power-cycling external output devices (such as additionally attached graphical outputs via HDMI, VGA, DVI, etc.) the content of a screensaver-locked session can be revealed. In some scenarios, the attacker can execute applications, such as by clicking with a mouse.
CVSS metrics
4 scores · 3 sources · 2 versions- OSV · UbuntuEcosystem advisory · calculated6.1MediumCVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
- OSV · DebianEcosystem advisory · calculated6.1MediumCVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
EPSS trend
Probability
0.58%
Chance of exploitation in the next 30 days
Percentile
47%
Versus all other CVEs
30-day change
0.00 pp
From 0.58% on 20-09-2026
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
1 foundMate Screensaver
Maturity: poc
Weaknesses
CWE · root causeAffected systems
Debian1 product
- mate-screensaver< 1.20.2-1
Mate-desktop1 product
- mate-screensaver< 1.20.2
Ubuntu1 product
- mate-screensaverAll versions (No fix recorded)
3 vendors · 3 products
References
7 links- github.com/mate-desktop/mate-screensaver/issues/152X Refsource MISCExploitPatchThird Party AdvisoryREPORT
- github.com/mate-desktop/mate-screensaver/issues/155X Refsource MISCExploitThird Party AdvisoryREPORT
