CVE-2010-0923: Race condition in workspace/krunner/lock/lockdlg.cc in the KRunner lock module in kdebase in KDE SC 4.4.0 a...

Security readout for executives and security teams

CVE-2010-0923 is a KDE screen-lock bypass in KDE SC 4.4.0. A person with physical access to an unattended workstation could potentially get past KScreenSaver because of a timing flaw in the KRunner lock module. This is mainly a workstation and shared-device risk, not a remote server exposure. Exposure is most likely on legacy desktop systems running KDE SC 4.4.0 with KScreenSaver locking enabled. Business risk is higher for shared workstations, kiosks, labs, and offices where unattended authenticated sessions may be physically reachable. Treat this as a moderate, physical-access workstation risk. It is urgent where unlocked session access could expose sensitive data, privileged tools, or customer environments, but it does not indicate internet-scale exploitation from the supplied sources. Mitigation focus: Check KDE advisory guidance for the corrected kdebase/KRunner lock code.; Update affected KDE SC 4.4.0 systems using vendor-supported packages.; Prioritize shared or physically accessible workstations first..

Prepared

Jun 28, 2026, 09:59 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.