CVE-2018-19120

—

CVSS 3.0

7.5 high

EPSS

1%p72

Published

Nov 29, 2018 (Nov 29, 2018)

Modified

Jun 17, 2026

Description

The HTML thumbnailer plugin in KDE Applications before 18.12.0 allows attackers to trigger outbound TCP connections to arbitrary IP addresses, leading to disclosure of the source IP address.

Vendors: kde
Products: kde applications
Weakness: CWE-200
Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

NVD CVE.org GitHub PoCs EPSS (1.5%)

In the news0 stories

No ingested article mentions this CVE yet.