Plasma-workspace

This hub aggregates every CVE we track for Plasma-workspace, a product in the operating systems space. Use it to gauge the current risk picture and drill into individual advisories.

Severity distribution

Monthly trend

The 7 most recently published vulnerabilities affecting Plasma-workspace.

• CVE-2024-36041KSmserver in KDE Plasma Workspace (aka plasma-workspace) before 5.27.11.1 and 6.x before 6.0.5.1 allows connections via ICE based purely on the host, i.e., all local connections are accepted. This ...7.8Jul 5, 2024
• CVE-2024-1433KDE Plasma Workspace Theme File eventpluginsmanager.cpp enabledPlugins path traversal3.1Feb 11, 2024
• CVE-2018-6791An issue was discovered in soliduiserver/deviceserviceaction.cpp in KDE Plasma Workspace before 5.12.0. When a vfat thumbdrive that contains `` or $() in its volume label is plugged in and mounted ...6.8Feb 7, 2018
• CVE-2018-6790An issue was discovered in KDE Plasma Workspace before 5.12.0. dataengines/notifications/notificationsengine.cpp allows remote attackers to discover client IP addresses via a URL in a notification,...5.3Feb 7, 2018
• CVE-2016-2312Turning all screens off in Plasma-workspace and kscreenlocker while the lock screen is shown can result in the screen being unlocked when turning a screen on again.6.8Dec 23, 2016
• CVE-2015-1308kde-workspace 4.2.0 and plasma-workspace before 5.1.95 allows remote attackers to obtain input events, and consequently obtain passwords, by leveraging access to the X server when the screen is loc...4.3Jan 26, 2015
• CVE-2015-1307plasma-workspace before 5.1.95 allows remote attackers to obtain passwords via a Trojan horse Look and Feel package.4.3Jan 26, 2015