Known vulnerabilities in KDE Connect

Vendor: KDE.org
Software: KDE Connect
Software CPE: cpe:2.3:a:kde_org:kdeconnect-kde:*:*:*:*:*:*:*:*
Website: https://www.kde.org/
Total vulnerabilities: 5
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 8.7

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting KDE Connect KDE Connect is affected by 5 known vulnerabilities: 5 medium Critical High Medium Low

Vulnerabilities (5)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU118798 - Insufficient Verification of Data Authenticity
CVE-2025-66270		 CWE-345 Medium
No
No
 - 27.11.2025 SB2025112709
SB2025112712
SB2025113001
and 1 more
#VU107600 - Insufficient Verification of Data Authenticity
CVE-2025-32900		 CWE-345 Medium
No
No
 25.04.0 18.04.2025 SB2025041809
#VU107599 - Improper Authentication
CVE-2025-32898		 CWE-287 Medium
No
No
 25.04.0 18.04.2025 SB2025041809
#VU48709 - User Interface (UI) Misrepresentation of Critical Information (Clickjacking, spoofing)
 CWE-451 Medium
No
No
 20.11.90 07.10.2020 SB2020113009
#VU47271 - Resource exhaustion
CVE-2020-26164		 CWE-400 Medium
No
No
 20.08.1 02.10.2020 SB2020100216
SB2020100724
SB2020101009
and 4 more