kde konqueror

Name: kde konqueror
Brand: kde

productUS

cpe:2.3:a:kde:konqueror:*:*:*:*:*:*:*:*

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

KEV-listed

critical

by severity

0critical11high19medium3low

updated 2026-10-27

vulnerabilities (33)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2007-1308US	medium4.3	8.44% (95th)	Exploit	no fix	2007-03-07	= 3.5.5
CVE-2006-3672US	low2.6	6.87% (94th)	Exploit	no fix	2006-07-18	24 versions
CVE-2004-0527US	medium5.0	5.76% (93rd)	Exploit	no fix	2004-08-06	12 versions
CVE-2004-1165US	high7.5	4.44% (91st)	Exploit	no fix	2005-01-10	= 3.3.1
CVE-2003-1478US	medium4.3	4.21% (91st)	Exploit	no fix	2003-12-31	= 3.0.3
CVE-2007-1564US	medium6.8	3.90% (90th)	Exploit	no fix	2007-03-21	= 3.5.5
CVE-2008-5712US	medium5.0	3.80% (90th)	Exploit	no fix	2008-12-24	= 3.5.9
CVE-2008-5698US	medium4.3	3.49% (89th)	Exploit	no fix	2008-12-22	—
CVE-2007-6000US	medium5.0	3.34% (89th)	Exploit	no fix	2007-11-15	≤ 3.5.6
CVE-2007-4229US	medium4.3	2.18% (82nd)	Exploit	no fix	2007-08-08	≤ 3.5.7
CVE-2004-0867US	high7.5	17.2% (97th)	—	no fix	2004-12-23	18 versions
CVE-2004-0866US	high7.5	10.1% (96th)	—	no fix	2004-09-16	18 versions
CVE-2004-0411US	high7.5	7.78% (95th)	—	no fix	2004-07-07	≤ 3.2.2
CVE-2003-0592US	high7.5	4.41% (91st)	—	no fix	2004-04-15	10 versions
CVE-2002-1151US	high7.5	3.59% (89th)	—	no fix	2002-10-11	5 versions
CVE-2009-2537US	medium4.3	3.19% (88th)	—	no fix	2009-07-20	—
CVE-2003-0459US	medium5.0	2.90% (87th)	—	no fix	2003-08-27	10 versions
CVE-2002-0970US	high7.5	2.84% (87th)	—	no fix	2002-09-24	4 versions
CVE-2004-1158US	high7.5	2.72% (86th)	—	no fix	2005-01-10	22 versions
CVE-2007-3820US	low2.6	2.56% (85th)	—	no fix	2007-07-17	= 3.5.7
CVE-2007-3143US	medium6.4	1.99% (81st)	—	no fix	2007-06-11	= 3.5.5
CVE-2007-4225US	medium6.8	1.96% (80th)	—	no fix	2007-08-08	= 3.5.7
CVE-2007-0537US	low2.6	1.90% (80th)	—	no fix	2007-01-29	= 3.5.5
CVE-2004-0746US	high7.5	1.89% (79th)	—	no fix	2004-10-20	13 versions
CVE-2007-4224US	medium4.3	1.83% (79th)	—	no fix	2007-08-08	= 3.5.7
CVE-2005-0237US	medium5.0	1.63% (76th)	—	no fix	2005-05-02	= 3.2.1
CVE-2004-0721US	high7.5	1.62% (76th)	—	no fix	2004-07-27	2 versions
CVE-2004-0870US	medium5.0OT elevated	1.46% (73rd)	—	no fix	2004-09-16	18 versions
CVE-2007-2164US	medium5.0	1.42% (73rd)	—	no fix	2007-04-22	= 3.5.5
CVE-2005-4684US	medium6.4OT elevated	1.41% (72nd)	—	no fix	2005-12-31	23 versions
CVE-2007-1565US	high7.8	1.32% (71st)	—	no fix	2007-03-21	= 3.5.5
CVE-2008-4382US	medium5.0	1.10% (66th)	—	no fix	2008-10-02	= 3.5.9
CVE-2007-6591US	medium4.3	0.82% (57th)	—	no fix	2007-12-28	2 versions

weaknesses (8)

The flaw types (CWEs) most of these CVEs share.

CWE-20Improper Input Validation9 CVEs
CWE-352Cross-Site Request Forgery (CSRF)5 CVEs
CWE-399CWE-3995 CVEs
CWE-310CWE-3104 CVEs
CWE-119Improper Restriction of Operations within the Bounds of a Memory Buffer2 CVEs
CWE-200Exposure of Sensitive Information to an Unauthorized Actor2 CVEs
CWE-295Improper Certificate Validation2 CVEs
CWE-400Uncontrolled Resource Consumption2 CVEs

sources (1)

Which sources assert this record, and when.

USNVD / CVE33 CVEs

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan