KDE okular vulnerabilities

Latest KDE okular CVEs

Newest publication first

1. CVE-2020-9359 KDE Okular before 1.10.0 allows code execution via an action link in a PDF document.

   Published 2020-03-24

   Medium·CVSS 5.3 EPSS 1.5%

   KDE Okular before 1.10.0 allows code execution via an action link in a PDF document.

2. CVE-2018-1000801 okular version 18.08 and earlier contains a Directory Traversal vulnerability in function "unpackDocumentArchive(...)" in "core/document.cpp" that can result in Arbitrary file creation on the user wor...

   Published 2018-09-06

   Medium·CVSS 5.5 EPSS 1.8%

   okular version 18.08 and earlier contains a Directory Traversal vulnerability in function "unpackDocumentArchive(...)" in "core/document.cpp" that can result in Arbitrary file creation on the user workstation. This attack appear to be exploitable via he victim must open a special...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.