KGet 2.4.2 in KDE SC 4.0.0 through 4.4.3 does not properly request download confirmation from the user, which makes it easier for remote attackers to overwrite arbitrary files via a crafted metalink file.
Conclusion & alert: CVE-2010-1511 is rated Moderate Risk (53.7/100): CVSS Medium severity, with medium exploitation likelihood (EPSS 3.32%). Mandatory action: Review affected assets and schedule remediation.
Risk is dynamic; we continuously reassess and refresh what is shown on this page as upstream context changes.
EPSS lead: Daily EPSS estimates relative likelihood of exploitation; percentile ranks this CVE among scored vulnerabilities (higher = more severe relative rank).
| # | Date | Old EPSS score | New EPSS score | Delta (New - Old) |
|---|---|---|---|---|
| 1 | 2026-06-15 | 5.70% | 3.32% | -2.37% |
| 2 | 2026-01-11 | 6.64% | 5.70% | -0.94% |
| 3 | 2025-03-30 | — | 6.64% | — |
Full EPSS history (8 records total)
CVSS metrics for this CVE.
| Base score | Version | Severity | Vector | Exploitability | Impact | Score source |
|---|---|---|---|---|---|---|
| 6.4 | 2.0 | MEDIUM |
|
10.0 | 4.9 | [email protected] |
| vendor | priority | summary | link |
|---|---|---|---|
gentoo
|
high | CVE-2010-1511: 1 GLSA(s) (201412-08), 27 atom(s) (app-antivirus/bitdefender-console, app-arch/gzip, …); latest impact high. | https://bugs.gentoo.org/buglist.cgi?quicksearch=CVE-2010-1511 |
redhat
|
high | — | https://access.redhat.com/security/cve/CVE-2010-1511 |
ubuntu
|
low | CVE-2010-1511 low priority: Ubuntu including 1 source packages (kdenetwork), 6 status rows across 6 suites (dapper, hardy, jaunty, karmic, lucid, upstream): ignored 2, not-affected 2, needs-triage 1, released 1. | https://ubuntu.com/security/CVE-2010-1511 |
| Vendor | Product | Version | Raw CPE |
|---|---|---|---|
| kde | kget | 2.4.2 | cpe:2.3:a:kde:kget:2.4.2:*:*:*:*:*:*:* |
| kde | kde_sc | 2.2.0 | cpe:2.3:a:kde:kde_sc:2.2.0:*:*:*:*:*:*:* |
| kde | kde_sc | 3.5.10 | cpe:2.3:a:kde:kde_sc:3.5.10:*:*:*:*:*:*:* |
| kde | kde_sc | 4.0.0 | cpe:2.3:a:kde:kde_sc:4.0.0:*:*:*:*:*:*:* |
| kde | kde_sc | 4.0.0 | cpe:2.3:a:kde:kde_sc:4.0.0:alpha1:*:*:*:*:*:* |
| kde | kde_sc | 4.0.0 | cpe:2.3:a:kde:kde_sc:4.0.0:alpha2:*:*:*:*:*:* |
| kde | kde_sc | 4.0.0 | cpe:2.3:a:kde:kde_sc:4.0.0:beta1:*:*:*:*:*:* |
| kde | kde_sc | 4.0.0 | cpe:2.3:a:kde:kde_sc:4.0.0:beta2:*:*:*:*:*:* |
| kde | kde_sc | 4.0.0 | cpe:2.3:a:kde:kde_sc:4.0.0:beta3:*:*:*:*:*:* |
| kde | kde_sc | 4.0.0 | cpe:2.3:a:kde:kde_sc:4.0.0:beta4:*:*:*:*:*:* |
| kde | kde_sc | 4.0.0 | cpe:2.3:a:kde:kde_sc:4.0.0:rc1:*:*:*:*:*:* |
| kde | kde_sc | 4.0.0 | cpe:2.3:a:kde:kde_sc:4.0.0:rc2:*:*:*:*:*:* |
| kde | kde_sc | 4.0.1 | cpe:2.3:a:kde:kde_sc:4.0.1:*:*:*:*:*:*:* |
| kde | kde_sc | 4.0.2 | cpe:2.3:a:kde:kde_sc:4.0.2:*:*:*:*:*:*:* |
| kde | kde_sc | 4.0.3 | cpe:2.3:a:kde:kde_sc:4.0.3:*:*:*:*:*:*:* |
| kde | kde_sc | 4.0.4 | cpe:2.3:a:kde:kde_sc:4.0.4:*:*:*:*:*:*:* |
| kde | kde_sc | 4.0.5 | cpe:2.3:a:kde:kde_sc:4.0.5:*:*:*:*:*:*:* |
| kde | kde_sc | 4.1.0 | cpe:2.3:a:kde:kde_sc:4.1.0:*:*:*:*:*:*:* |
| kde | kde_sc | 4.1.0 | cpe:2.3:a:kde:kde_sc:4.1.0:alpha1:*:*:*:*:*:* |
| kde | kde_sc | 4.1.0 | cpe:2.3:a:kde:kde_sc:4.1.0:beta1:*:*:*:*:*:* |
| kde | kde_sc | 4.1.0 | cpe:2.3:a:kde:kde_sc:4.1.0:beta2:*:*:*:*:*:* |
| kde | kde_sc | 4.1.0 | cpe:2.3:a:kde:kde_sc:4.1.0:rc:*:*:*:*:*:* |
| kde | kde_sc | 4.1.1 | cpe:2.3:a:kde:kde_sc:4.1.1:*:*:*:*:*:*:* |
| kde | kde_sc | 4.1.2 | cpe:2.3:a:kde:kde_sc:4.1.2:*:*:*:*:*:*:* |
| kde | kde_sc | 4.1.3 | cpe:2.3:a:kde:kde_sc:4.1.3:*:*:*:*:*:*:* |
| kde | kde_sc | 4.1.4 | cpe:2.3:a:kde:kde_sc:4.1.4:*:*:*:*:*:*:* |
| kde | kde_sc | 4.1.80 | cpe:2.3:a:kde:kde_sc:4.1.80:*:*:*:*:*:*:* |
| kde | kde_sc | 4.1.85 | cpe:2.3:a:kde:kde_sc:4.1.85:*:*:*:*:*:*:* |
| kde | kde_sc | 4.1.96 | cpe:2.3:a:kde:kde_sc:4.1.96:*:*:*:*:*:*:* |
| kde | kde_sc | 4.2 | cpe:2.3:a:kde:kde_sc:4.2:beta2:*:*:*:*:*:* |
| kde | kde_sc | 4.2 | cpe:2.3:a:kde:kde_sc:4.2:rc:*:*:*:*:*:* |
| kde | kde_sc | 4.2.0 | cpe:2.3:a:kde:kde_sc:4.2.0:*:*:*:*:*:*:* |
| kde | kde_sc | 4.2.1 | cpe:2.3:a:kde:kde_sc:4.2.1:*:*:*:*:*:*:* |
| kde | kde_sc | 4.2.2 | cpe:2.3:a:kde:kde_sc:4.2.2:*:*:*:*:*:*:* |
| kde | kde_sc | 4.2.3 | cpe:2.3:a:kde:kde_sc:4.2.3:*:*:*:*:*:*:* |
| kde | kde_sc | 4.2.4 | cpe:2.3:a:kde:kde_sc:4.2.4:*:*:*:*:*:*:* |
| kde | kde_sc | 4.3.0 | cpe:2.3:a:kde:kde_sc:4.3.0:*:*:*:*:*:*:* |
| kde | kde_sc | 4.3.0 | cpe:2.3:a:kde:kde_sc:4.3.0:beta1:*:*:*:*:*:* |
| kde | kde_sc | 4.3.0 | cpe:2.3:a:kde:kde_sc:4.3.0:beta3:*:*:*:*:*:* |
| kde | kde_sc | 4.3.0 | cpe:2.3:a:kde:kde_sc:4.3.0:rc1:*:*:*:*:*:* |
| kde | kde_sc | 4.3.0 | cpe:2.3:a:kde:kde_sc:4.3.0:rc2:*:*:*:*:*:* |
| kde | kde_sc | 4.3.0 | cpe:2.3:a:kde:kde_sc:4.3.0:rc3:*:*:*:*:*:* |
| kde | kde_sc | 4.3.1 | cpe:2.3:a:kde:kde_sc:4.3.1:*:*:*:*:*:*:* |
| kde | kde_sc | 4.3.2 | cpe:2.3:a:kde:kde_sc:4.3.2:*:*:*:*:*:*:* |
| kde | kde_sc | 4.3.3 | cpe:2.3:a:kde:kde_sc:4.3.3:*:*:*:*:*:*:* |
| kde | kde_sc | 4.3.4 | cpe:2.3:a:kde:kde_sc:4.3.4:*:*:*:*:*:*:* |
| kde | kde_sc | 4.3.5 | cpe:2.3:a:kde:kde_sc:4.3.5:*:*:*:*:*:*:* |
| kde | kde_sc | 4.4.0 | cpe:2.3:a:kde:kde_sc:4.4.0:*:*:*:*:*:*:* |
| kde | kde_sc | 4.4.0 | cpe:2.3:a:kde:kde_sc:4.4.0:beta1:*:*:*:*:*:* |
| kde | kde_sc | 4.4.0 | cpe:2.3:a:kde:kde_sc:4.4.0:beta2:*:*:*:*:*:* |
| kde | kde_sc | 4.4.0 | cpe:2.3:a:kde:kde_sc:4.4.0:rc1:*:*:*:*:*:* |
| kde | kde_sc | 4.4.0 | cpe:2.3:a:kde:kde_sc:4.4.0:rc2:*:*:*:*:*:* |
| kde | kde_sc | 4.4.0 | cpe:2.3:a:kde:kde_sc:4.4.0:rc3:*:*:*:*:*:* |
| kde | kde_sc | 4.4.1 | cpe:2.3:a:kde:kde_sc:4.4.1:*:*:*:*:*:*:* |
| kde | kde_sc | 4.4.2 | cpe:2.3:a:kde:kde_sc:4.4.2:*:*:*:*:*:*:* |
| kde | kde_sc | 4.4.3 | cpe:2.3:a:kde:kde_sc:4.4.3:*:*:*:*:*:*:* |