This page lists publicly disclosed CVE vulnerabilities affecting kde ark (linked via NVD CPE). Each row includes severity scores, summaries, and publication dates to help identify and analyze security issues.
| CVE | Summary | Source | Max CVSS | EPSS % | Published | Updated |
|---|---|---|---|---|---|---|
| CVE-2020-24654 | In KDE Ark before 20.08.1, a crafted TAR archive with symlinks can install files outside the extraction directory, as demonstrated by a write operation to a user's home directory. | [email protected] | 3.3 | 0.83% | 2020-09-02 | 2024-11-21 |
| CVE-2020-16116 | In kerfuffle/jobs.cpp in KDE Ark before 20.08.0, a crafted archive can install files outside the extraction directory via ../ directory traversal. | [email protected] | 3.3 | 0.83% | 2020-08-03 | 2024-11-21 |
| CVE-2017-5330 | ark before 16.12.1 might allow remote attackers to execute arbitrary code via an executable in an archive, related to associated applications. | [email protected] | 7.8 | 0.52% | 2017-03-27 | 2026-05-13 |
| CVE-2011-2725 | Directory traversal vulnerability in Ark 4.7.x and earlier allows remote attackers to delete and force the display of arbitrary files via .. (dot dot) sequences in a zip file. | [email protected] | 6.8 | 0.38% | 2014-02-04 | 2026-04-29 |