Uploaded August 2019 | Updated September 2026, 2 weeks ago

---

Dominik “zer0pwn” Penner published a KDE design flaw on Twitter. Just viewing a malicious .desktop or .directory file with Dolphin file manager can result in malicious code being executed on a users system. This vulnerability was designated CVE-2019-14744.

Sources:
zdnet.com/article/unpatched-kde-vulnerability-disclosed-on-twitter
twitter.com/zer0pwn/status/1158167374799020039
gist.githubusercontent.com/zeropwn/630832df151029cb8f22d5b6b9efaefb/raw/64aa3d30279acb207f787ce9c135eefd5e52643b/kde-kdesktopfile-command-injection.txt
twitter.com/kdecommunity/status/1159224511499309056
kde.org/info/security
kde.org/info/security/advisory-20190807-1.txt
mail.kde.org/pipermail/kde-announce/2019-August/000047.html
cybersecurity-help.cz/vdb/SB2019081004?affChecked=1
security-tracker.debian.org/tracker/source-package/kconfig
kubuntu.org/news/fixes-for-recent-kde-desktop-vulnerability
paper.seebug.org/1008

Wallpaper: pling.com/s/Antiques/p/1316958

Like my channel? Please help support it:
Patreon: patreon.com/quidsup
Paypal: paypal.me/quidsup

Follow me on Social Media
Twitter: twitter.com/quidsup
MeWe: mewe.com/i/quidsup
Minds: minds.com/quidsup

#KDE #Vulnerability #Malware