An unpatched zero-day vulnerability exists in KDE 4 & 5 that could allow attackers to execute code simply by tricking a user into downloading an archive, extracting it, and then opening the folder. […]
Click here for original story, Zero-Day Bug in KDE 4/5 Executes Commands by Opening a Folder
Source: Bleeping Computer