https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-12T07:13:31.618678+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2022-05725 bdu:2022-05725 2026-10-12T07:13:31.636933+00:00 bdu:2022-05725 https://cve.radiocsirt.org/vuln/euvd-2026-13881 EUVD-2026-13881 2026-10-12T07:13:31.636966+00:00 EUVD-2026-13881 https://cve.radiocsirt.org/vuln/fkie_cve-2022-23853 fkie_cve-2022-23853 2026-10-12T07:13:31.636979+00:00

The LSP (Language Server Protocol) plugin in KDE Kate before 21.12.2 and KTextEditor before 5.91.0 tries to execute the associated LSP server binary when opening a file of a given type. If this binary is absent from the PATH, it will try running the LSP server binary in the directory of the file that was just opened (due to a misunderstanding of the QProcess API, that was never intended). This can be an untrusted directory.

 https://cve.radiocsirt.org/vuln/ghsa-qjh4-6jqf-7749 GHSA-qjh4-6jqf-7749 2026-10-12T07:13:31.637008+00:00

The LSP (Language Server Protocol) plugin in KDE Kate before 21.12.2 and KTextEditor before 5.91.0 tries to execute the associated LSP server binary when opening a file of a given type. If this binary is absent from the PATH, it will try running the LSP server binary in the directory of the file that was just opened (due to a misunderstanding of the QProcess API, that was never intended). This can be an untrusted directory.

 https://cve.radiocsirt.org/vuln/gsd-2022-23853 gsd-2022-23853 2026-10-12T07:13:31.637025+00:00 gsd-2022-23853 https://cve.radiocsirt.org/vuln/opensuse-su-2022:0841-1 openSUSE-SU-2022:0841-1 — Security update for libqt5-qtbase 2026-10-12T07:13:31.637035+00:00

Security update for libqt5-qtbase

 https://cve.radiocsirt.org/vuln/suse-su-2022:0841-1 SUSE-SU-2022:0841-1 — Security update for libqt5-qtbase 2026-10-12T07:13:31.637052+00:00

Security update for libqt5-qtbase

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2022-23853 UBUNTU-CVE-2022-23853 2026-10-12T07:13:31.637066+00:00

Affected: Ubuntu:16.04:LTS: kate, Ubuntu:16.04:LTS: ktexteditor, Ubuntu:18.04:LTS: kate, Ubuntu:18.04:LTS: ktexteditor, Ubuntu:20.04:LTS: kate, Ubuntu:20.04:LTS: ktexteditor, Ubuntu:22.04:LTS: kate, Ubuntu:22.04:LTS: ktexteditor, Ubuntu:24.04:LTS: kate, Ubuntu:24.04:LTS: ktexteditor and 4 more

The LSP (Language Server Protocol) plugin in KDE Kate before 21.12.2 and KTextEditor before 5.91.0 tries to execute the associated LSP server binary when opening a file of a given type. If this binary is absent from the PATH, it will try running the LSP server binary in the directory of the file that was just opened (due to a misunderstanding of the QProcess API, that was never intended). This can be an untrusted directory.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2024-0089 WID-SEC-W-2024-0089 — KDE: Schwachstelle ermöglicht Privilegieneskalation 2026-10-12T07:13:31.637101+00:00

Ein lokaler Angreifer kann eine Schwachstelle in KDE ausnutzen, um seine Privilegien zu erhöhen.