K
KDE
Security Risk Profile
44
/100
mediumSecurity Risk Score
Comprehensive risk assessment based on 261 vulnerabilities, EPSS scores, exploitation status, and remediation availability.
📅 Data spans from May 5, 1997 to present
261
Total CVEs
96
Critical+High
1
Exploited
39
Unpatched
Threat Assessment
Avg CVSS
6
Base severity
Avg EPSS
0%
Exploit probability
Unpatched
39
Critical/High
Risk Level
44/100
medium
⚠️ 1 Active Exploits🆕 3Fresh (<7d)📈 5 in Last 30 Days
Severity Distribution
Critical
14High
82Medium
113Low
22Exploit Likelihood
>50% chance
020-50%
05-20%
0<5%
2Age Distribution
Common Weaknesses (CWE)
1
Buffer Overflow
33
2
Integer Overflow
12
3
Input Validation
10
4
Path Traversal
9
5
Infoleak
7
Most Affected Products
1. KDE kde479
2. KDE KDE SC296
3. Poppler Poppler249
4. SUSE SuSE Linux181
5. Debian Debian Linux129
Recent Vulnerabilities
See more →EOL-kde-plasma-6.8
unknown
Oct 14, 2026
CVE-2026-110236
CVSS 7.1high
KDE Dolphin 24.08.0 through 26.08.2 OS Command Injection via Crafted Folder Name
Oct 13, 2026🔧 No Patch
bleepingcomputer-20260622210501
unknown
FFmpeg fixes PixelSmash flaw in widely used video decoder
Jun 22, 2026⚠ Exploited🔧 No Patch
EOL-kde-plasma-6.7
unknown
Jun 16, 2026
https://seclists.org/oss-sec/2026/q2/573
unknown
On the issue of MIME handlers that execute arbitrary code (e.g. Wine)
May 19, 2026🔧 No Patch
CVE-2026-45184
CVSS 6.5medium
May 9, 2026
CVE-2026-41526
CVSS 7.8high
Apr 28, 2026
CVE-2026-41525
CVSS 6.5medium
Apr 28, 2026🔧 No Patch
CVE-2026-25710
CVSS 7.0high
plasma-login-manager: Weaknesses in plasmaloginauthhelper (CVE-2026-25710)
Apr 27, 2026🔧 No Patch
https://seclists.org/oss-sec/2026/q2/228
unknown
plasma-login-manager: Weaknesses in plasmaloginauthhelper (CVE-2026-25710)
Apr 27, 2026🔧 No Patch
Monitor KDE in Real-Time
Get instant alerts when new vulnerabilities are discovered. Stay ahead of security threats with SecAlerts.