PT-2025-54472

CVE-2025-69412

Published

2025-12-31

Updated

2026-03-10

Description by

CVSS 3.1

3.4

Low

MetricsAV:A/AC:H/PR:N/UI:N/S:C/C:N/I:L/A:N

Name of the Vulnerable Software and Affected Versions KDE messagelib versions prior to 25.11.90

Description The software does not properly handle SSL errors when using the Google Safe Browsing Lookup API, potentially allowing for spoofing of threat data. This issue affects the find function within the threatMatches component of the API. The Google Safe Browsing Lookup API is not used by default in the messagelib configuration.

Recommendations Update to version 25.11.90 or later.

Exploitability

Exploit

Fix

Impacts

Vendors

Affected products

Weakness enumeration

CWE-295: Improper Certificate Validation

Related identifiers

CVE-2025-69412

BDU:2026-03574