KDE vulnerabilities

By year

Bars are flaws published each year; the red part is the share attackers have used.

Latest high and critical flaws

• CVE-2026-110236 KDE Dolphin 24.08.0 through 26.08.2 contains an OS command injection vulnerability that allows attackers to execute commands by supplying crafted folder names sHigh 7.1 · Oct 13, 2026
• CVE-2026-25710 The new upstream added a privileged D-Bus helper called plasmaloginauthhelper, which suffers from multiple issues, e.g.aA compromised plasmalogin service accounHigh 7 · May 13, 2026
• CVE-2025-49091 KDE Konsole before 25.04.2 allows remote code execution in a certain scenario.High 8.2 · Jun 10, 2025
• CVE-2024-36041 KSmserver in KDE Plasma Workspace (aka plasma-workspace) before 5.27.11.1 and 6.x before 6.0.5.1 allows connections via ICE based purely on the host, i.e., all High 7.8 · Jul 4, 2024
• CVE-2023-52723 In KDE libksieve before 23.03.80, kmanagesieve/session.cpp places a cleartext password in server logs because a username variable is accidentally given a passwoHigh 7.1 · Apr 29, 2024
• CVE-2022-24986 KDE KCron through 21.12.2 uses a temporary file in /tmp when saving, but reuses the filename during an editing session.High 7.8 · Feb 26, 2022
• CVE-2022-23853 The LSP (Language Server Protocol) plugin in KDE Kate before 21.12.2 and KTextEditor before 5.91.0 tries to execute the associated LSP server binary when openinHigh 7.8 · Feb 11, 2022
• CVE-2021-28117 libdiscover/backends/KNSBackend/KNSResource.cpp in KDE Discover before 5.21.3 automatically creates links to potentially dangerous URLs (that are neither https:High 7.5 · Mar 20, 2021
• CVE-2020-27187 An issue was discovered in KDE Partition Manager 4.1.0 before 4.2.0.High 7.8 · Oct 26, 2020
• CVE-2013-2120 The %{password(...)} macro in pastemacroexpander.cpp in the KDE Paste Applet before 4.10.5 in kdeplasma-addons does not properly generate passwords, which allowHigh 8.4 · Feb 11, 2020
• CVE-2012-4512 The CSS parser (khtml/css/cssparser.cpp) in Konqueror in KDE 4.7.3 allows remote attackers to cause a denial of service (crash) and possibly read memory via a cHigh 8.8 · Feb 8, 2020
• CVE-2019-14744 In KDE Frameworks KConfig before 5.61.0, malicious desktop files and configuration files lead to code execution with minimal user interaction.High 7.8 · Aug 7, 2019
• CVE-2019-7443 KDE KAuth before 5.55 allows the passing of parameters with arbitrary types to helpers running as root over DBus via DBusHelperProxy.cpp.High 8.1 · May 7, 2019
• CVE-2018-19120 The HTML thumbnailer plugin in KDE Applications before 18.12.0 allows attackers to trigger outbound TCP connections to arbitrary IP addresses, leading to discloHigh 7.5 · Nov 29, 2018
• CVE-2018-10380 kwallet-pam in KDE KWallet before 5.12.6 allows local users to obtain ownership of arbitrary files via a symlink attack.High 7.8 · May 8, 2018
• CVE-2018-10361 An issue was discovered in KTextEditor 5.34.0 through 5.45.0.High 7.8 · Apr 25, 2018
• CVE-2017-9604 KDE kmail before 5.5.2 and messagelib before 5.5.2, as distributed in KDE Applications before 17.04.2, do not ensure that a plugin's sign/encrypt action occurs High 7.5 · Jun 13, 2017
• CVE-2017-8422 KDE kdelibs before 4.14.32 and KAuth before 5.34 allow local users to gain root privileges by spoofing a callerID and leveraging a privileged helper app.High 7.8 · May 17, 2017
• CVE-2016-7967 KMail since version 5.3.0 used a QWebEngine based viewer that had JavaScript enabled.High 8.1 · Dec 23, 2016
• CVE-2016-7966 Through a malicious URL that contained a quote character it was possible to inject HTML code in KMail's plaintext viewer.High 7.3 · Dec 23, 2016
• CVE-2014-8651 The KDE Clock KCM policykit helper in kde-workspace before 4.11.14 and plasma-desktop before 5.1.1 allows local users to gain privileges via a crafted ntpUtilitHigh 7.2 · Dec 6, 2014
• CVE-2012-3455 Heap-based buffer overflow in the read function in filters/words/msword-odf/wv2/src/styles.cpp in the Microsoft import filter in KOffice 2.3.3 and earlier allowHigh 7.5 · Aug 20, 2012
• CVE-2009-2702 KDE KSSL in kdelibs 3.5.4, 4.2.4, and 4.3 does not properly handle a '\0' character in a domain name in the Subject Alternative Name field of an X.509 certificaHigh 7.5 · Sep 8, 2009
• CVE-2009-2896 Buffer overflow in KMplayer 2.9.4.1433 and earlier allows remote attackers to cause a denial of service (application crash) or execute arbitrary code via a longHigh 9.3 · Aug 20, 2009
• CVE-2008-1670 Heap-based buffer overflow in the progressive PNG Image loader (decoders/pngloader.cpp) in KHTML in KDE 4.0.x up to 4.0.3 allows remote attackers to cause a denHigh 9.3 · Apr 28, 2008