Product by Debian
Kitty
9 known vulnerabilities in Kitty (Debian), 0 of them actively exploited (CISA KEV).
Key figures
9
Vulnerabilities
0
Actively exploited (KEV)
0
Used by ransomware
2
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| Critical | CVE-2020-35605 | Kovidgoyal Kitty: Code Execution | 9.8 | |
| Medium | CVE-2023-48795 | SSH Communications Security SSH daemon: security vulnerability | 5.9 | |
| Critical | CVE-2026-33642 | Kitty has a Heap Buffer Over-Read/Write via Integer Overflow in compose_rectangles Bounds Check | 9.9 | |
| High | CVE-2026-42850 | Kitty has a shell command injection | 8.8 | |
| High | CVE-2026-33633 | Kitty has a Heap Buffer Overflow in its Graphics Protocol Handler | 7.5 | |
| High | CVE-2026-54057 | Kitty vulnerable to command injection via unsanitized OSC 21 query reply | 7.8 | |
| High | CVE-2026-42851 | @kitty-edit DCS + --color=geninclude vulnerable to Unauthenticated in-process RCE | 7.8 | |
| High | CVE-2022-41322 | Kitty: Code Execution | 7.8 | |
| Medium | CVE-2026-54055 | Kitty has an Arbitrary File Write via Symlink Race Condition in File Transmission Protocol | 5.0 |