QT
Product
qt
81
CVEs
0
On KEV
9.8
Max CVSS
10
New 30D
Severity mix
Critical 5High 26Medium 25Low 9
Watch
Add qt to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-15037 | 2.9 | Jul 23 | XML injection vulnerability in QDom comment, CDATA and processing-instruction serialization Affected: 4.0.0 before 6.12.0 |
| CVE-2026-78253 | 2.3 | Sep 23 | Denial-of-service (stack-exhaustion) vulnerability in QXmlStreamReader::readElementText() impacts Qt Affected: 5.0.0 through 6.8.8; 6.9.0 through 6.11.1 |
| CVE-2026-96432 New | 2.1 | Oct 26 | Null pointer dereference vulnerability in QNetworkAccessManager impacts Qt Affected: 6.8.0 through 6.8.9; 6.9.0 through 6.11.2 |
| CVE-2026-95620 New | 2.1 | Oct 23 | Use-after-free vulnerability in QNetworkAccessManager HTTP/2 support impacts Qt Affected: 6.9.0 before 6.11.3 |
| CVE-2025-5991 | 2.1 | Jun 11 | Use after free in QHttp2ProtocolHandler Affected: 6.9.0 |
| CVE-2026-107157 New | 2.0 | Oct 26 | Out-of-bounds read vulnerability in QCborValue::fromCbor() impacts Qt Framework Affected: 5.12.0 through 6.8.8; 6.9.0 through 6.11.2 |
| CVE-2026-107590 New | 1.9 | Oct 27 | Out-of-bounds write vulnerability in QTextCodec iconv-based encoding impacts Qt Affected: 4.5.0 through 6.8.8; 6.9.0 through 6.11.2 |
| CVE-2025-14575 | 1.8 | May 19 | Uncontrolled Search Path Element in Qt Network OpenSSL TLS backend allows rogue CA certificate loading Affected: 5.0.0 through 5.15.19; 6.0.0 through 6.5.9; 6.6.0 through 6.8.3; 6.9.0 through 6.9.1 |
| CVE-2026-79616 | 0.6 | Sep 23 | Out-of-bounds read vulnerability in Context2D.path and PathSvg.path properties impacts Qt Quick Affected: 5.10.0 through 6.8.8; 6.9.0 through 6.11.1 |
Showing 9