QT
Vendor
qt
91
CVEs
0
On KEV
13
New 30D
Products
QT9.8
qt
qt
81 CVEs0 on KEV10 new
QT8.8
Qt_for_MCUs
qt
3 CVEs0 on KEV3 new
AX8.7
Axivion
Qt
2 CVEs0 on KEV0 new
QT4.3
Qtbase
QT
1 CVEs0 on KEV0 new
QT7.8
Qtdeclarative
QT
1 CVEs0 on KEV0 new
QT5.5
Qtsvg
QT
1 CVEs0 on KEV0 new
QT5.3
Qtwebkit
QT
1 CVEs0 on KEV0 new
QX5.5
Qxmlsimplereader
QT
1 CVEs0 on KEV0 new
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-107590 New | QT Qt qt | 1.9 | Oct 27 | Out-of-bounds write vulnerability in QTextCodec iconv-based encoding impacts Qt |
| CVE-2026-107472 New | QT Qt qt | 4.3 | Oct 27 | Out-of-bounds read vulnerability in QTextCodec TSCII encoding impacts Qt |
| CVE-2026-105946 New | QT qt qt | 5.3 | Oct 27 | Out-of-bounds read vulnerability in NTLM authentication handling impacts Qt |
| CVE-2026-107157 New | QT Qt qt | 2.0 | Oct 26 | Out-of-bounds read vulnerability in QCborValue::fromCbor() impacts Qt Framework |
| CVE-2026-96432 New | QT qt qt | 2.1 | Oct 26 | Null pointer dereference vulnerability in QNetworkAccessManager impacts Qt |
| CVE-2026-95620 New | QT qt qt | 2.1 | Oct 23 | Use-after-free vulnerability in QNetworkAccessManager HTTP/2 support impacts Qt |
| CVE-2026-16762 New | QT qt qt | 8.7 | Oct 23 | Denial-of-service vulnerability in the Qt Core QXmlStream parser (QXmlStreamReader) impacts Qt |
| CVE-2026-105923 | QT Qt qt | 4.0 | Oct 21 | Null-pointer dereference in QTriangulator reachable through VectorImage |
| CVE-2026-101201 | QT qt qt | 4.3 | Oct 20 | QBinaryJson::fromBinaryData() integer overflow leading to OOB read |
| CVE-2026-8168 | QT qt qt | 7.1 | Oct 19 | Denial-of-service vulnerability in the SVG parser and renderer impacts Qt |
| CVE-2026-94370 | QT Qt_for_MCUs qt | 6.5 | Oct 14 | Memory corruption (double free / use-after-free) vulnerability in core string handling impacts Qt for MCUs |
| CVE-2026-19395 | QF Qt for MCUs qt | 6.6 | Oct 5 | An empty <img> attribute value in styled text triggers a parser error that halts the device. |
| CVE-2026-95509 | QF Qt for MCUs qt | 8.8 | Sep 29 | Out-of-bounds read vulnerability in string formatting impacts Qt for MCUs |
| CVE-2026-79680 | QT qt qt | 4.5 | Sep 24 | Authentication bypass vulnerability in the password authentication mechanism of the Qt VNC Server module |
| CVE-2026-78253 | QT qt qt | 2.3 | Sep 23 | Denial-of-service (stack-exhaustion) vulnerability in QXmlStreamReader::readElementText() impacts Qt |
| CVE-2026-79616 | QT qt qt | 0.6 | Sep 23 | Out-of-bounds read vulnerability in Context2D.path and PathSvg.path properties impacts Qt Quick |
| CVE-2026-76151 | QT qt qt | 4.6 | Sep 16 | Out-of-bounds read (buffer over-read) vulnerability in HTTP Cache-Control response header parsing impacts Qt Framework (QtNetwork module) |
| CVE-2026-19248 | QT qt qt | 7.1 | Sep 16 | Unbounded recursion vulnerability in the QDomNode destructor of Qt XML impacts Qt |
| CVE-2026-13326 | QT qt qt | 6.9 | Sep 11 | Out-of-bounds read and integer underflow vulnerability in QNdefNfcTextRecord impacts Qt NFC module |
| CVE-2026-11573 | QT qt qt | 7.1 | Sep 8 | Uncontrolled recursion in QDomDocument/QDomNode serialization causes stack exhaustion (QtXml) |
| CVE-2026-15037 | QT Qt Qt | 2.9 | Jul 23 | XML injection vulnerability in QDom comment, CDATA and processing-instruction serialization |
| CVE-2026-9499 | QT Qt Qt | 6.3 | Jul 21 | Out-of-bounds read in QTextCodec::codecForName() in Qt |
| CVE-2026-12379 | AX Axivion Qt | 6.8 | Jul 16 | URL Redirection to Untrusted Site ('Open Redirect') vulnerability in the Dashboard OAuth/OIDC implementation of Axivion |
| CVE-2026-12593 | AX Axivion Qt | 8.7 | Jul 9 | Privilege escalation via forged API token creation in Axivion Dashboard OIDC/OAuth2/SSO subsystem |
| CVE-2025-14575 | QT Qt Qt | 1.8 | May 19 | Uncontrolled Search Path Element in Qt Network OpenSSL TLS backend allows rogue CA certificate loading |
| CVE-2026-6210 | QT Qt Qt | 8.7 | May 6 | Type confusion and heap-buffer-overflow in Qt SVG marker handling causing application crash |
| CVE-2025-14576 | QT Qt Qt | 7.8 | Apr 30 | Possible QML code injection in VectorImage component |
| CVE-2025-5991 | QT Qt Qt | 2.1 | Jun 11 | Use after free in QHttp2ProtocolHandler |
| CVE-2025-5683 | QT QT QT | 5.5 | Jun 5 | When loading a specifically crafted ICNS format image file in QImage then it will trigger a crash. This issue affects Qt from versions 6.3.0 through 6.5.9, from 6.6.0 through… |
| CVE-2025-30348 | QT QT QT | 5.3 | Mar 21 | encodeText in QDom in Qt before 6.8.0 has a complex algorithm involving XML string copy and inline replacement of parts of a string (with relocation of later data) |
| CVE-2024-39936 | QT QT QT | 5.9 | Jul 4 | An issue was discovered in HTTP2 in Qt before 5.15.18, 6.x before 6.2.13, 6.3.x through 6.5.x before 6.5.7, and 6.6.x through 6.7.x before 6.7.3 |
| CVE-2024-36048 | QT QT QT | 9.8 | May 18 | QAbstractOAuth in Qt Network Authorization in Qt before 5.15.17, 6.x before 6.2.13, 6.3.x through 6.5.x before 6.5.6, and 6.6.x through 6.7.x before 6.7.1 uses only the time to… |
| CVE-2024-25580 | QT QT QT | 6.2 | Mar 27 | An issue was discovered in gui/util/qktxhandler.cpp in Qt before 5.15.17, 6.x before 6.2.12, 6.3.x through 6.5.x before 6.5.5, and 6.6.x before 6.6.2 |
| CVE-2024-30161 | QT QT QT | 6.5 | Mar 24 | In Qt 6.5.4, 6.5.5, and 6.6.2, QNetworkReply header data might be accessed via a dangling pointer in Qt for WebAssembly (wasm) |
| CVE-2023-51714 | QT QT QT | 9.8 | Dec 24 | An issue was discovered in the HTTP2 implementation in Qt before 5.15.17, 6.x before 6.2.11, 6.3.x through 6.5.x before 6.5.4, and 6.6.x before 6.6.2 |
| CVE-2023-43114 | QT QT QT | 5.5 | Sep 18 | An issue was discovered in Qt before 5.15.16, 6.x before 6.2.10, and 6.3.x through 6.5.x before 6.5.3 on Windows |
| CVE-2023-37369 | QT QT QT | 7.5 | Aug 20 | In Qt before 5.15.15, 6.x before 6.2.9, and 6.3.x through 6.5.x before 6.5.2, there can be an application crash in QXmlStreamReader via a crafted XML string that triggers a… |
| CVE-2021-28025 | QT QT QT | 5.5 | Aug 11 | Integer Overflow vulnerability in qsvghandler.cpp in Qt qtsvg versions 5.15.1, 6.0.0, 6.0.2, and 6.2, allows local attackers to cause a denial of service (DoS) |
| CVE-2023-38197 | QT QT QT | 7.5 | Jul 13 | An issue was discovered in Qt before 5.15.15, 6.x before 6.2.10, and 6.3.x through 6.5.x before 6.5.3 |
| CVE-2023-34410 | QT QT QT | 5.3 | Jun 5 | An issue was discovered in Qt before 5.15.15, 6.x before 6.2.9, and 6.3.x through 6.5.x before 6.5.2 |
| CVE-2023-32763 | QT QT QT | 7.5 | May 28 | An issue was discovered in Qt before 5.15.15, 6.x before 6.2.9, and 6.3.x through 6.5.x before 6.5.1 |
| CVE-2023-32762 | QT QT QT | 5.3 | May 28 | An issue was discovered in Qt before 5.15.14, 6.x before 6.2.9, and 6.3.x through 6.5.x before 6.5.1 |
| CVE-2023-33285 | QT QT QT | 5.3 | May 22 | An issue was discovered in Qt 5.x before 5.15.14, 6.x before 6.2.9, and 6.3.x through 6.5.x before 6.5.1 |
| CVE-2023-32573 | QT QT QT | 6.5 | May 10 | In Qt before 5.15.14, 6.0.x through 6.2.x before 6.2.9, and 6.3.x through 6.5.x before 6.5.1, QtSvg QSvgFont m_unitsPerEm initialization is mishandled |
| CVE-2023-24607 | QT QT QT | 7.5 | Apr 15 | Qt before 6.4.3 allows a denial of service via a crafted string when the SQL ODBC driver plugin is used and the size of SQLTCHAR is 4 |
| CVE-2022-43591 | QT QT QT | 8.8 | Jan 12 | A buffer overflow vulnerability exists in the QML QtScript Reflect API of Qt Project Qt 6.3.2 |
| CVE-2022-40983 | QT QT QT | 8.8 | Jan 12 | An integer overflow vulnerability exists in the QML QtScript Reflect API of Qt Project Qt 6.3.2 |
| CVE-2021-3481 | QT QT QT | 7.1 | Aug 22 | A flaw was found in Qt |
| CVE-2022-25634 | QT QT QT | 7.5 | Mar 2 | Qt through 5.15.8 and 6.x through 6.2.3 can load system library files from an unintended working directory |
| CVE-2022-25255 | QT QT QT | 7.8 | Feb 16 | In Qt 5.9.x through 5.15.x before 5.15.9 and 6.x before 6.2.4 on Linux and UNIX, QProcess could execute a binary from the current working directory when not found in the PATH |
| CVE-2021-45930 | QT Qtsvg QT | 5.5 | Jan 1 | Qt SVG in Qt 5.0.0 through 5.15.2 and 6.0.0 through 6.2.1 has an out-of-bounds write in QtPrivate::QCommonArrayOps<QPainterPath::Element>::growAppend (called from… |
| CVE-2021-38593 | QT QT QT | 7.5 | Aug 12 | Qt 5.x before 5.15.6 and 6.x through 6.1.2 has an out-of-bounds write in QOutlineMapper::convertPath (called from QRasterPaintEngine::fill and QPaintEngineEx::stroke) |
| CVE-2020-24742 | QT QT QT | 7.8 | Aug 9 | An issue has been fixed in Qt versions 5.14.0 where QPluginLoader attempts to load plugins relative to the working directory, allowing attackers to execute arbitrary code via… |
| CVE-2020-0569 | QT QT QT | 5.7 | Nov 23 | Out of bounds write in Intel(R) PROSet/Wireless WiFi products on Windows 10 may allow an authenticated user to potentially enable denial of service via local access |
| CVE-2020-0570 | QT QT QT | 7.3 | Sep 14 | Uncontrolled search path in the QT Library before 5.14.0, 5.12.7 and 5.9.10 may allow an authenticated user to potentially enable elevation of privilege via local access |
| CVE-2020-17507 | QT QT QT | 5.3 | Aug 12 | An issue was discovered in Qt through 5.12.9, and 5.13.x through 5.15.x before 5.15.1 |
| CVE-2020-13962 | QT QT QT | 7.5 | Jun 9 | Qt 5.12.2 through 5.14.2, as used in unofficial builds of Mumble 1.3.0 and other products, mishandles OpenSSL's error queue, which can cause a denial of service to QSslSocket… |
| CVE-2020-12267 | QT QT QT | 9.8 | Apr 27 | setMarkdown in Qt before 5.14.2 has a use-after-free related to QTextMarkdownImporter::insertBlock |
| CVE-2018-21035 | QT QT QT | 7.5 | Feb 28 | In Qt through 5.14.1, the WebSocket implementation accepts up to 2GB for frames and 2GB for messages |
| CVE-2015-9541 | QT QT QT | 7.5 | Jan 24 | Qt through 5.14 allows an exponential XML entity expansion attack via a crafted SVG document that is mishandled in QXmlStreamReader, a related issue to CVE-2003-1564 |