KDE vulnerabilities
196 vulnerabilities
Known vulnerabilities in KDE products, newest first, with CVSS severity, EPSS, KEV listings and ransomware use, across 68 products.
Products
50 of 68- Kde62 vulnerabilities
- Konqueror32 vulnerabilities
- Kde Sc10 vulnerabilities
- Kmail10 vulnerabilities
- Koffice9 vulnerabilities
- Kdelibs8 vulnerabilities
- Kpdf7 vulnerabilities
- Plasma Workspace7 vulnerabilities
- Ark5 vulnerabilities
- K Mail5 vulnerabilities
- Kdegraphics5 vulnerabilities
- Kde Workspace4 vulnerabilities
- Kauth3 vulnerabilities
- Kde Applications3 vulnerabilities
- Kdeconnect3 vulnerabilities
- Konqueror Embedded3 vulnerabilities
- Kword3 vulnerabilities
- Messagelib3 vulnerabilities
- Dolphin2 vulnerabilities
- Kio Extras2 vulnerabilities
- Kmplayer2 vulnerabilities
- Ktexteditor2 vulnerabilities
- Okular2 vulnerabilities
- Paste Applet2 vulnerabilities
- Trojita2 vulnerabilities
- Amarok1 vulnerabilities
- Arianna1 vulnerabilities
- Arts1 vulnerabilities
- Dcopserver1 vulnerabilities
- Desktop Communication Protocol Daemon1 vulnerabilities
- Discover1 vulnerabilities
- Karchives1 vulnerabilities
- Kate1 vulnerabilities
- Kconfig1 vulnerabilities
- Kcoreaddons1 vulnerabilities
- Kcron1 vulnerabilities
- Kde Beta 31 vulnerabilities
- KDE Connect Information Exchange Protocol1 vulnerabilities
- KDE Connect Protocol1 vulnerabilities
- KDE Connect Verification Code Protocol1 vulnerabilities
- Kde Frameworks1 vulnerabilities
- Kde Pim1 vulnerabilities
- Kde Cli Tools1 vulnerabilities
- Kde Runtime1 vulnerabilities
- Kdebase1 vulnerabilities
- Kdenlive1 vulnerabilities
- Kdeutils1 vulnerabilities
- Kget1 vulnerabilities
- Kimageformats1 vulnerabilities
- Kio1 vulnerabilities
CVE-2026-110236debiandolphin+2
EPSS score1.02%
KDE Dolphin 24.08.0 through 26.08.2 contains an OS command injection vulnerability that allows attackers to execute commands by supplying crafted folder names substituted into the {path} placeholder. Attackers can embed a double quote and shell metacharacters in a directory name to escape quoting in slotDoubleClickViewBackground, executing commands when victims double-click the view background.CVE-2018-1000801debianokular+9EPSS score1.83%
okular version 18.08 and earlier contains a Directory Traversal vulnerability in function "unpackDocumentArchive(...)" in "core/document.cpp" that can result in Arbitrary file creation on the user workstation. This attack appear to be exploitable via he victim must open a specially crafted Okular archive. This issue appears to have been corrected in version 18.08.1CVE-2018-19516debiankf5-messagelib+3EPSS score1.10%
messagepartthemes/default/defaultrenderer.cpp in messagelib in KDE Applications before 18.12.0 does not properly restrict the handling of an http-equiv="REFRESH" value.CVE-2018-19120debiankio-extras+4EPSS score1.46%
The HTML thumbnailer plugin in KDE Applications before 18.12.0 allows attackers to trigger outbound TCP connections to arbitrary IP addresses, leading to disclosure of the source IP address.CVE-2018-10361debianktexteditor+3EPSS score0.38%
An issue was discovered in KTextEditor 5.34.0 through 5.45.0. Insecure handling of temporary files in the KTextEditor's kauth_ktexteditor_helper service (as utilized in the Kate text editor) can allow other unprivileged users on the local system to gain root privileges. The attack occurs when one user (who has an unprivileged account but is also able to authenticate as root) writes a text file using Kate into a directory owned by a another unprivileged user. The latter unprivileged user conducts a symlink attack to achieve privilege escalation.CVE-2018-10380debiankwallet-pam+4EPSS score0.44%
kwallet-pam in KDE KWallet before 5.12.6 allows local users to obtain ownership of arbitrary files via a symlink attack.CVE-2018-6790debianplasma-workspace+43EPSS score2.09%
An issue was discovered in KDE Plasma Workspace before 5.12.0. dataengines/notifications/notificationsengine.cpp allows remote attackers to discover client IP addresses via a URL in a notification, as demonstrated by the src attribute of an IMG element.CVE-2018-6791debianplasma-workspace+3EPSS score0.78%
An issue was discovered in soliduiserver/deviceserviceaction.cpp in KDE Plasma Workspace before 5.12.0. When a vfat thumbdrive that contains `` or $() in its volume label is plugged in and mounted through the device notifier, it's interpreted as a shell command, leading to a possibility of arbitrary command execution. An example of an offending volume label is "$(touch b)" -- this will create a file called b in the home folder.CVE-2003-1478kdekonquerorEPSS score4.21%
Konqueror in KDE 3.0.3 allows remote attackers to cause a denial of service (core dump) via a web page that begins with a "xFFxFE" byte sequence and a large number of CRLF sequences, as demonstrated using freeze.htm.CVE-2003-0592debiankdelibs+3EPSS score4.41%
Konqueror in KDE 3.1.3 and earlier (kdelibs) allows remote attackers to bypass intended cookie access restrictions on a web application via "%2e%2e" (encoded dot dot) directory traversal sequences in a URL, which causes Konqueror to send the cookie outside the specified URL subsets, e.g. to a vulnerable application that runs on the same server as the target application.CVE-2003-0988kdekde+3EPSS score6.15%
Buffer overflow in the VCF file information reader for KDE Personal Information Management (kdepim) suite in KDE 3.1.0 through 3.1.4 allows attackers to execute arbitrary code via a VCF file.CVE-2003-0256kdekopeteEPSS score2.17%
The GnuPG plugin in kopete before 0.6.2 does not properly cleanse the command line when executing gpg, which allows remote attackers to execute arbitrary commands.CVE-2003-0692kdekdeEPSS score2.75%
KDM in KDE 3.1.3 and earlier uses a weak session cookie generation algorithm that does not provide 128 bits of entropy, which allows attackers to guess session cookies via brute force methods and gain access to the user session.CVE-2003-0690kdekdeEPSS score3.10%
KDM in KDE 3.1.3 and earlier does not verify whether the pam_setcred function call succeeds, which may allow attackers to gain root privileges by triggering error conditions within PAM modules, as demonstrated in certain configurations of the MIT pam_krb5 module.CVE-2003-0204debiankdebase+2EPSS score4.03%
KDE 2 and KDE 3.1.1 and earlier 3.x versions allows attackers to execute arbitrary commands via (1) PostScript (PS) or (2) PDF files, related to missing -dPARANOIDSAFER and -dSAFER arguments when using the kghostview Ghostscript viewer.CVE-2003-0370applesafari+5EPSS score2.06%
Konqueror Embedded and KDE 2.2.2 and earlier does not validate the Common Name (CN) field for X.509 Certificates, which could allow remote attackers to spoof certificates via a man-in-the-middle attack.CVE-2003-0459kdekonqueror+7EPSS score2.90%
KDE Konqueror for KDE 3.1.2 and earlier does not remove authentication credentials from URLs of the "user:password@host" form in the HTTP-Referer header, which could allow remote web sites to steal the credentials for pages that link to the sites.CVE-2013-2074debiankde4libs+1EPSS score1.98%
kioslave/http/http.cpp in KIO in kdelibs 4.10.3 and earlier allows attackers to discover credentials via a crafted request that triggers an "internal server error," which includes the username and password in an error message.CVE-2013-2213ubuntukdeplasma-addons+1EPSS score0.31%
The KRandom::random function in KDE Paste Applet after 4.10.5 in kdeplasma-addons uses the GNU C Library rand function's linear congruential generator, which makes it easier for context-dependent attackers to defeat cryptographic protection mechanisms by predicting the generator output.CVE-2013-2120debiankdeplasma-addons+2EPSS score0.56%
The %{password(...)} macro in pastemacroexpander.cpp in the KDE Paste Applet before 4.10.5 in kdeplasma-addons does not properly generate passwords, which allows context-dependent attackers to bypass authentication via a brute-force attack.