Kde Ktexteditor vulnerabilities

2 CVEs affecting Kde Ktexteditor, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2022-23853, published 2022-02-11.

More from Kde.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2022-23853, published 2022-02-11. High severity, CVSS 7.8. EPSS: 0.9% chance of exploitation in the next 30 days. The LSP (Language Server Protocol) plugin in KDE Kate before 21.12.2 and KTextEditor before 5.91.0 tries to execute the associated LSP server binary when opening a file of a given type. If this…
• CVE-2018-10361, published 2018-04-25. High severity, CVSS 7.8. EPSS: 0.4% chance of exploitation in the next 30 days. An issue was discovered in KTextEditor 5.34.0 through 5.45.0. Insecure handling of temporary files in the KTextEditor's kauth_ktexteditor_helper service (as utilized in the Kate text editor) can…