Skip to content
OpenAdvisories

Vendor

KDE

19 known vulnerabilities.

Products

Dolphin 2 KDEConnect 2 messagelib 1 Arianna 1 Kdenlive 1 Skanpage 1 Konqueror 1 ark 1 KCoreAddons 1 KDE Connect information-exchange protocol 1 Plasma Workspace 1 KDE Connect protocol 1 Krita 1 KDE Connect verification-code protocol 1 Kleopatra 1 Konsole 1 plasma-login-manager 1
All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • High 7.0
    CVE-2026-110236

    KDE Dolphin 24.08.0 through 26.08.2 OS Command Injection via Crafted Folder Name

    KDE Dolphin 24.08.0 through 26.08.2 contains an OS command injection vulnerability that allows attackers to execute commands by supplying crafted folder names substituted into the {path} placeholder. Attackers can embed a double quote and shell metacharacters…

    KDE Dolphin dolphin dolphin Debian Ubuntu
  • High 7.0
    CVE-2026-25710

    The new upstream added a privileged D-Bus helper called plasmaloginauthhelper, which suffers from multiple issues, e.g.…

    KDE plasma-login-manager
  • High 8.2
    CVE-2025-49091 Public exploit

    KDE Konsole before 25.04.2 allows remote code execution in a certain scenario. It supports loading URLs from the scheme…

    KDE Konsole konsole konsole Debian Ubuntu