Kde Frameworks vulnerabilities

1 vulnerability

Known vulnerabilities in Kde Frameworks, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

8.4CVE-2016-3100debiankinit+5
EPSS score
0.40%
kinit in KDE Frameworks before 5.23.0 uses weak permissions (644) for /tmp/xauth-xxx-_y, which allows local users to obtain X11 cookies of other users and consequently capture keystrokes and possibly gain privileges by reading the file.