CVE-1999-1270: Kde

Medium severity, CVSS 4.6. EPSS: 0.3% chance of exploitation in the next 30 days.

KMail in KDE 1.0 provides a PGP passphrase as a command line argument to other programs, which could allow local users to obtain the passphrase and compromise the PGP keys of other users by viewing the arguments via programs that list process information, such as ps.

Affected products

• Kde Kde: version 1.0 only

Published 1998-07-11. Last modified 2026-06-16.