Skip to content
Noroxi

Qt records

64 published records for vendor qt.

Researcher profile

Entered KEV
0 · 0%
Weaponized
0 · 0%
Pre-auth RCE
11
With a fix record
87.5%
Median publish → KEV
No record has entered KEV

Records by year

  1. 17
  2. 18
  3. 19
  4. 20
  5. 21
  6. 22
  7. 23
  8. 24
  9. 25
  10. 26

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

CWE

Attack profile

All records

64 records
  • CVE-2018-19873
    40Plan

    An issue was discovered in Qt before 5.11.3.

    CriticalCVSS 9.8No exploitEPSS 3%

    qt · qtDec 26, 2018

  • CVE-2020-12267
    40Plan

    setMarkdown in Qt before 5.14.2 has a use-after-free related to QTextMarkdownImporter::insertBlock.

    CriticalCVSS 9.8No exploitEPSS 2%

    qt · qtApr 26, 2020

  • CVE-2017-10904
    40Plan

    Qt for Android prior to 5.9.0 allows remote attackers to execute arbitrary OS commands via unspecified vectors.

    CriticalCVSS 9.8No exploitEPSS 2%

    qt · qtDec 15, 2017

  • CVE-2011-3193
    39Monitor

    Heap-based buffer overflow in the Lookup_MarkMarkPos function in the HarfBuzz module (harfbuzz-gpos.c), as used by Qt before 4.7.4 and Pango

    CriticalCVSS 9.3No exploitEPSS 7%

    qt · qtJun 15, 2012

  • CVE-2011-3194
    39Monitor

    Buffer overflow in the TIFF reader in gui/image/qtiffhandler.cpp in Qt 4.7.4 allows remote attackers to cause a denial of service (crash) an

    CriticalCVSS 9.3No exploitEPSS 7%

    qt · qtJun 15, 2012

  • CVE-2023-51714
    39Monitor

    An issue was discovered in the HTTP2 implementation in Qt before 5.15.17, 6.x before 6.2.11, 6.3.x through 6.5.x before 6.5.4, and 6.6.x bef

    CriticalCVSS 9.8No exploitEPSS 1%

    qt · qtDec 24, 2023

  • CVE-2024-36048
    39Monitor

    QAbstractOAuth in Qt Network Authorization in Qt before 5.15.17, 6.x before 6.2.13, 6.3.x through 6.5.x before 6.5.6, and 6.6.x through 6.7.

    CriticalCVSS 9.8No exploitEPSS 1%

    qt · qtMay 18, 2024

  • CVE-2015-1290
    36Monitor

    The Google V8 engine, as used in Google Chrome before 44.0.2403.89 and QtWebEngineCore in Qt before 5.5.1, allows remote attackers to cause

    HighCVSS 8.8No exploitEPSS 3%

    google · chromeJan 9, 2018

  • CVE-2018-15518
    36Monitor

    QXmlStream in Qt 5.x before 5.11.3 has a double-free or corruption during parsing of a specially crafted illegal XML document.

    HighCVSS 8.8No exploitEPSS 3%

    qt · qtDec 26, 2018

  • CVE-2018-19870
    36Monitor

    An issue was discovered in Qt before 5.11.3.

    HighCVSS 8.8No exploitEPSS 2%

    qt · qtDec 26, 2018

  • CVE-2022-43591
    35Monitor

    A buffer overflow vulnerability exists in the QML QtScript Reflect API of Qt Project Qt 6.3.2.

    HighCVSS 8.8No exploitEPSS 1%

    qt · qtJan 12, 2023

  • CVE-2022-40983
    35Monitor

    An integer overflow vulnerability exists in the QML QtScript Reflect API of Qt Project Qt 6.3.2.

    HighCVSS 8.8No exploitEPSS 1%

    qt · qtJan 12, 2023

  • CVE-2021-38593
    31Monitor

    Qt 5.x before 5.15.6 and 6.x through 6.1.2 has an out-of-bounds write in QOutlineMapper::convertPath (called from QRasterPaintEngine::fill a

    HighCVSS 7.5No exploitEPSS 3%

    qt · qtAug 11, 2021

  • CVE-2020-13962
    31Monitor

    Qt 5.12.2 through 5.14.2, as used in unofficial builds of Mumble 1.3.0 and other products, mishandles OpenSSL's error queue, which can cause

    HighCVSS 7.5No exploitEPSS 3%

    mumble · mumbleJun 8, 2020

  • CVE-2015-9541
    31Monitor

    Qt through 5.14 allows an exponential XML entity expansion attack via a crafted SVG document that is mishandled in QXmlStreamReader, a relat

    HighCVSS 7.5No exploitEPSS 2%

    qt · qtJan 24, 2020

  • CVE-2018-21035
    31Monitor

    In Qt through 5.14.1, the WebSocket implementation accepts up to 2GB for frames and 2GB for messages.

    HighCVSS 7.5No exploitEPSS 2%

    qt · qtFeb 28, 2020

  • CVE-2018-19865
    31Monitor

    A keystroke logging issue was discovered in Virtual Keyboard in Qt 5.7.x, 5.8.x, 5.9.x, 5.10.x, and 5.11.x before 5.11.3.

    HighCVSS 7.5No exploitEPSS 2%

    qt · qtDec 5, 2018

  • CVE-2022-25634
    31Monitor

    Qt through 5.15.8 and 6.x through 6.2.3 can load system library files from an unintended working directory.

    HighCVSS 7.5No exploitEPSS 2%

    qt · qtMar 2, 2022

  • CVE-2020-24742
    31Monitor

    An issue has been fixed in Qt versions 5.14.0 where QPluginLoader attempts to load plugins relative to the working directory, allowing attac

    HighCVSS 7.8No exploitEPSS 1%

    qt · qtAug 9, 2021

  • CVE-2022-25255
    31Monitor

    In Qt 5.9.x through 5.15.x before 5.15.9 and 6.x before 6.2.4 on Linux and UNIX, QProcess could execute a binary from the current working di

    HighCVSS 7.8No exploitEPSS 0%

    qt · qtFeb 16, 2022

  • CVE-2015-1860
    30Monitor

    Multiple buffer overflows in gui/image/qgifhandler.cpp in the QtBase module in Qt before 4.8.7 and 5.x before 5.4.2 allow remote attackers t

    MediumCVSS 6.8No exploitEPSS 9%

    qt · qtMay 12, 2015

  • CVE-2023-37369
    30Monitor

    In Qt before 5.15.15, 6.x before 6.2.9, and 6.3.x through 6.5.x before 6.5.2, there can be an application crash in QXmlStreamReader via a cr

    HighCVSS 7.5No exploitEPSS 2%

    qt · qtAug 20, 2023

  • CVE-2017-15011
    30Monitor

    The named pipes in qtsingleapp in Qt 5.x, as used in qBittorrent and SugarSync, are configured for remote access and allow remote attackers

    HighCVSS 7.5No exploitEPSS 1%

    qt · qtOct 3, 2017

  • CVE-2023-24607
    30Monitor

    Qt before 6.4.3 allows a denial of service via a crafted string when the SQL ODBC driver plugin is used and the size of SQLTCHAR is 4.

    HighCVSS 7.5No exploitEPSS 1%

    qt · qtApr 14, 2023

  • CVE-2023-32763
    30Monitor

    An issue was discovered in Qt before 5.15.15, 6.x before 6.2.9, and 6.3.x through 6.5.x before 6.5.1.

    HighCVSS 7.5No exploitEPSS 1%

    qt · qtMay 28, 2023