本ページは kde ark に影響する公開済み CVE（NVD の CPE 経由で関連付け）を列挙します。各行に深刻度指標・概要・公開日が含まれます。
| CVE | 概要 | ソース | CVSS 最大値 | EPSS（%） | 公開 | 更新 |
|---|---|---|---|---|---|---|
| CVE-2020-24654 | In KDE Ark before 20.08.1, a crafted TAR archive with symlinks can install files outside the extraction directory, as demonstrated by a write operation to a user's home directory. | [email protected] | 3.3 | 0.83% | 2020-09-02 | 2024-11-21 |
| CVE-2020-16116 | In kerfuffle/jobs.cpp in KDE Ark before 20.08.0, a crafted archive can install files outside the extraction directory via ../ directory traversal. | [email protected] | 3.3 | 0.83% | 2020-08-03 | 2024-11-21 |
| CVE-2017-5330 | ark before 16.12.1 might allow remote attackers to execute arbitrary code via an executable in an archive, related to associated applications. | [email protected] | 7.8 | 0.52% | 2017-03-27 | 2026-05-13 |
| CVE-2011-2725 | Directory traversal vulnerability in Ark 4.7.x and earlier allows remote attackers to delete and force the display of arbitrary files via .. (dot dot) sequences in a zip file. | [email protected] | 6.8 | 0.38% | 2014-02-04 | 2026-04-29 |