qt
- Products in analyzed data
- 2
- Catalog vulnerabilities
- 81
Severity across 21 analyzed records
Verify to analyze this security profile
A short verification protects source data and prevents automated AI requests.
en
Severity across 21 analyzed records
A short verification protects source data and prevents automated AI requests.
As of 09/11/2026, qt recorded 6 security vulnerabilities in the last 90 days across 2 products, including 2 rated High or above and 0 known exploited vulnerabilities (KEV) that should be prioritized for immediate remediation.
Over the last 90 days, qt had the most security vulnerabilities in the qt ecosystem, with 4 vulnerabilities—approximately 66.67% of the provider's total vulnerabilities during this period.
| CVE | Exploitation status | Fix | Affected product | Published | Severity |
|---|---|---|---|---|---|
CVE-2026-13326Out-of-bounds read and integer underflow vulnerability in QNdefNfcTextRecord impacts Qt NFC module | Exploitation statusNot confirmed | FixYes | Affected productqt | Published09/11/2026 | SeverityMedium |
CVE-2026-11573Uncontrolled recursion in QDomDocument/QDomNode serialization causes stack exhaustion (QtXml) | Exploitation statusNot known exploited | FixYes | Affected productqt | Published09/08/2026 | SeverityHigh |
CVE-2026-15037XML injection vulnerability in QDom comment, CDATA and processing-instruction serialization | Exploitation statusNot known exploited | FixYes | Affected productqt | Published07/23/2026 | SeverityLow |
CVE-2026-9499Out-of-bounds read in QTextCodec::codecForName() in Qt | Exploitation statusNot known exploited | FixYes | Affected productqt | Published07/21/2026 | SeverityMedium |
CVE-2026-12379URL Redirection to Untrusted Site ('Open Redirect') vulnerability in the Dashboard OAuth/OIDC implementation of Axivion | Exploitation statusNot known exploited | FixYes | Affected productAxivion | Published07/16/2026 | SeverityMedium |
CVE-2026-12593Privilege escalation via forged API token creation in Axivion Dashboard OIDC/OAuth2/SSO subsystem | Exploitation statusNot known exploited | FixYes | Affected productAxivion | Published07/09/2026 | SeverityHigh |
CVE-2025-14575Uncontrolled Search Path Element in Qt Network OpenSSL TLS backend allows rogue CA certificate loading | Exploitation statusNot known exploited | FixYes | Affected productqt | Published05/19/2026 | SeverityLow |
CVE-2026-6210Type confusion and heap-buffer-overflow in Qt SVG marker handling causing application crash | Exploitation statusNot known exploited | FixYes | Affected productqt | Published05/06/2026 | SeverityHigh |
CVE-2025-14576Possible QML code injection in VectorImage component | Exploitation statusNot known exploited | FixYes | Affected productqt | Published04/30/2026 | SeverityHigh |
CVE-2025-12385Improper validation of <img> tag size in Text component parser | Exploitation statusNot known exploited | FixYes | Affected productqt | Published12/03/2025 | SeverityHigh |
CVE-2025-23050CVE-2025-23050 | Exploitation statusNot known exploited | FixYes | Affected productqt | Published10/31/2025 | SeverityLow |
CVE-2025-6338Possible denial of service with multiple incoming connections to a Schannel based server with a TLS backend | Exploitation statusNot known exploited | FixYes | Affected productqt | Published10/16/2025 | SeverityCritical |
CVE-2025-10729Use-after-free vulnerability in Qt SVG qsvghandler.cpp allows denial of service via crafted SVG | Exploitation statusNot known exploited | FixYes | Affected productqt | Published10/03/2025 | SeverityCritical |
CVE-2025-10728Uncontrolled recursion in Qt SVG module | Exploitation statusNot known exploited | FixYes | Affected productqt | Published10/03/2025 | SeverityCritical |
CVE-2025-5992Passing values outside of expected range to QColorTransferGenericFunction can cause a denial of service | Exploitation statusNot known exploited | FixYes | Affected productqt | Published07/11/2025 | SeverityLow |
CVE-2025-5991Use after free in QHttp2ProtocolHandler | Exploitation statusNot known exploited | FixNot confirmed | Affected productqt | Published06/11/2025 | SeverityLow |
CVE-2025-5683CVE-2025-5683 | Exploitation statusNot known exploited | FixYes | Affected productqt | Published06/05/2025 | SeverityMedium |
CVE-2025-5455Possible denial of service when passing malformed data in a URL to qDecodeDataUrl | Exploitation statusNot known exploited | FixYes | Affected productqt | Published06/02/2025 | SeverityHigh |
CVE-2025-4211Improper Link Resolution Before File Access in QFileSystemEngine on Windows | Exploitation statusNot known exploited | FixYes | Affected productqt | Published05/16/2025 | SeverityHigh |
CVE-2025-3512Buffer overflow in QTextMarkdownImporter | Exploitation statusNot known exploited | FixYes | Affected productqt | Published04/11/2025 | SeverityMedium |
CVE-2025-30348CVE-2025-30348 | Exploitation statusNot known exploited | FixYes | Affected productqt | Published03/21/2025 | SeverityMedium |
CVE-2024-39936CVE-2024-39936 | Exploitation statusNot known exploited | FixNot confirmed | Affected productNot confirmed | Published07/04/2024 | SeverityHigh |
CVE-2024-36048CVE-2024-36048 | Exploitation statusPublic exploit | FixNot confirmed | Affected productNot confirmed | Published05/18/2024 | SeverityCritical |
CVE-2024-25580CVE-2024-25580 | Exploitation statusNot known exploited | FixNot confirmed | Affected productNot confirmed | Published03/27/2024 | SeverityMedium |
CVE-2024-30161CVE-2024-30161 | Exploitation statusNot known exploited | FixNot confirmed | Affected productNot confirmed | Published03/24/2024 | SeverityMedium |
CVE-2023-51714CVE-2023-51714 | Exploitation statusNot confirmed | FixNot confirmed | Affected productNot confirmed | Published12/24/2023 | SeverityUnknown |
CVE-2023-43114CVE-2023-43114 | Exploitation statusNot known exploited | FixNot confirmed | Affected productNot confirmed | Published09/18/2023 | SeverityUnknown |
CVE-2023-37369CVE-2023-37369 | Exploitation statusPublic exploit | FixNot confirmed | Affected productNot confirmed | Published08/20/2023 | SeverityUnknown |
CVE-2021-28025CVE-2021-28025 | Exploitation statusPublic exploit | FixNot confirmed | Affected productNot confirmed | Published08/11/2023 | SeverityUnknown |
CVE-2023-38197CVE-2023-38197 | Exploitation statusNot known exploited | FixNot confirmed | Affected productNot confirmed | Published07/13/2023 | SeverityHigh |
CVE-2023-34410CVE-2023-34410 | Exploitation statusNot known exploited | FixNot confirmed | Affected productNot confirmed | Published06/05/2023 | SeverityMedium |
CVE-2023-32763CVE-2023-32763 | Exploitation statusNot confirmed | FixNot confirmed | Affected productNot confirmed | Published05/28/2023 | SeverityUnknown |
CVE-2023-32762CVE-2023-32762 | Exploitation statusNot known exploited | FixNot confirmed | Affected productNot confirmed | Published05/28/2023 | SeverityMedium |
CVE-2023-33285CVE-2023-33285 | Exploitation statusNot known exploited | FixNot confirmed | Affected productNot confirmed | Published05/22/2023 | SeverityMedium |
CVE-2023-32573CVE-2023-32573 | Exploitation statusNot known exploited | FixNot confirmed | Affected productNot confirmed | Published05/10/2023 | SeverityMedium |
CVE-2023-24607CVE-2023-24607 | Exploitation statusNot known exploited | FixNot confirmed | Affected productNot confirmed | Published04/15/2023 | SeverityUnknown |
CVE-2022-40983CVE-2022-40983 | Exploitation statusPublic exploit | FixNot confirmed | Affected productQt | Published01/12/2023 | SeverityHigh |
CVE-2022-43591CVE-2022-43591 | Exploitation statusPublic exploit | FixNot confirmed | Affected productQt | Published01/12/2023 | SeverityHigh |
CVE-2021-3481CVE-2021-3481 | Exploitation statusNot confirmed | FixNot confirmed | Affected productqt | Published08/22/2022 | SeverityUnknown |
CVE-2022-25634CVE-2022-25634 | Exploitation statusNot confirmed | FixNot confirmed | Affected productNot confirmed | Published03/02/2022 | SeverityUnknown |
CVE-2022-25255CVE-2022-25255 | Exploitation statusNot confirmed | FixNot confirmed | Affected productNot confirmed | Published02/16/2022 | SeverityUnknown |
CVE-2021-45930CVE-2021-45930 | Exploitation statusNot confirmed | FixNot confirmed | Affected productNot confirmed | Published12/31/2021 | SeverityUnknown |
CVE-2021-38593CVE-2021-38593 | Exploitation statusNot confirmed | FixNot confirmed | Affected productNot confirmed | Published08/12/2021 | SeverityUnknown |
CVE-2020-24742CVE-2020-24742 | Exploitation statusNot confirmed | FixYes | Affected productNot confirmed | Published08/09/2021 | SeverityUnknown |
CVE-2020-0569CVE-2020-0569 | Exploitation statusNot confirmed | FixNot confirmed | Affected productIntel(R) PROSet/Wireless WiFi products on Windows 10 | Published11/23/2020 | SeverityUnknown |
CVE-2020-0570CVE-2020-0570 | Exploitation statusNot confirmed | FixNot confirmed | Affected productQT Library | Published09/14/2020 | SeverityUnknown |
CVE-2020-17507CVE-2020-17507 | Exploitation statusNot confirmed | FixNot confirmed | Affected productNot confirmed | Published08/12/2020 | SeverityUnknown |
CVE-2020-13962CVE-2020-13962 | Exploitation statusNot confirmed | FixNot confirmed | Affected productNot confirmed | Published06/08/2020 | SeverityUnknown |
CVE-2020-12267CVE-2020-12267 | Exploitation statusNot confirmed | FixNot confirmed | Affected productNot confirmed | Published04/27/2020 | SeverityUnknown |
CVE-2018-21035CVE-2018-21035 | Exploitation statusNot confirmed | FixNot confirmed | Affected productNot confirmed | Published02/28/2020 | SeverityHigh |
CVE-2015-9541CVE-2015-9541 | Exploitation statusNot confirmed | FixNot confirmed | Affected productNot confirmed | Published01/24/2020 | SeverityUnknown |
CVE-2019-18281CVE-2019-18281 | Exploitation statusNot confirmed | FixNot confirmed | Affected productNot confirmed | Published10/23/2019 | SeverityUnknown |
CVE-2018-19872CVE-2018-19872 | Exploitation statusNot confirmed | FixNot confirmed | Affected productNot confirmed | Published03/15/2019 | SeverityUnknown |
CVE-2018-15518CVE-2018-15518 | Exploitation statusNot confirmed | FixNot confirmed | Affected productNot confirmed | Published12/26/2018 | SeverityUnknown |
CVE-2018-19871CVE-2018-19871 | Exploitation statusNot confirmed | FixNot confirmed | Affected productNot confirmed | Published12/26/2018 | SeverityUnknown |
CVE-2018-19869CVE-2018-19869 | Exploitation statusNot confirmed | FixNot confirmed | Affected productNot confirmed | Published12/26/2018 | SeverityUnknown |
CVE-2018-19873CVE-2018-19873 | Exploitation statusNot confirmed | FixNot confirmed | Affected productNot confirmed | Published12/26/2018 | SeverityUnknown |
CVE-2018-19870CVE-2018-19870 | Exploitation statusNot confirmed | FixNot confirmed | Affected productNot confirmed | Published12/26/2018 | SeverityUnknown |
CVE-2018-19865CVE-2018-19865 | Exploitation statusNot confirmed | FixNot confirmed | Affected productNot confirmed | Published12/05/2018 | SeverityUnknown |
CVE-2015-1290CVE-2015-1290 | Exploitation statusNot confirmed | FixNot confirmed | Affected productNot confirmed | Published01/09/2018 | SeverityUnknown |
CVE-2017-10904CVE-2017-10904 | Exploitation statusNot confirmed | FixNot confirmed | Affected productQt for Android | Published12/15/2017 | SeverityUnknown |
CVE-2017-10905CVE-2017-10905 | Exploitation statusNot confirmed | FixNot confirmed | Affected productQt for Android | Published12/15/2017 | SeverityUnknown |
CVE-2017-15011CVE-2017-15011 | Exploitation statusNot confirmed | FixNot confirmed | Affected productNot confirmed | Published10/03/2017 | SeverityUnknown |
CVE-2015-8079CVE-2015-8079 | Exploitation statusNot confirmed | FixNot confirmed | Affected productNot confirmed | Published09/07/2017 | SeverityUnknown |
CVE-2016-10040CVE-2016-10040 | Exploitation statusNot confirmed | FixNot confirmed | Affected productNot confirmed | Published03/07/2017 | SeverityUnknown |
CVE-2015-7298CVE-2015-7298 | Exploitation statusNot confirmed | FixNot confirmed | Affected productNot confirmed | Published10/26/2015 | SeverityUnknown |
CVE-2015-1859CVE-2015-1859 | Exploitation statusNot confirmed | FixNot confirmed | Affected productNot confirmed | Published05/12/2015 | SeverityUnknown |
CVE-2015-1860CVE-2015-1860 | Exploitation statusNot confirmed | FixNot confirmed | Affected productNot confirmed | Published05/12/2015 | SeverityUnknown |
CVE-2015-1858CVE-2015-1858 | Exploitation statusNot confirmed | FixNot confirmed | Affected productNot confirmed | Published05/12/2015 | SeverityUnknown |
CVE-2014-0190CVE-2014-0190 | Exploitation statusNot confirmed | FixNot confirmed | Affected productNot confirmed | Published05/08/2014 | SeverityUnknown |
CVE-2013-4549CVE-2013-4549 | Exploitation statusNot confirmed | FixNot confirmed | Affected productNot confirmed | Published12/23/2013 | SeverityUnknown |
CVE-2012-5624CVE-2012-5624 | Exploitation statusNot confirmed | FixNot confirmed | Affected productNot confirmed | Published02/24/2013 | SeverityUnknown |
CVE-2012-6093CVE-2012-6093 | Exploitation statusNot confirmed | FixNot confirmed | Affected productNot confirmed | Published02/24/2013 | SeverityUnknown |
CVE-2013-0254CVE-2013-0254 | Exploitation statusNot confirmed | FixNot confirmed | Affected productNot confirmed | Published02/06/2013 | SeverityUnknown |
CVE-2010-5076CVE-2010-5076 | Exploitation statusNot confirmed | FixNot confirmed | Affected productNot confirmed | Published06/29/2012 | SeverityUnknown |
CVE-2011-3194CVE-2011-3194 | Exploitation statusNot confirmed | FixNot confirmed | Affected productNot confirmed | Published06/16/2012 | SeverityUnknown |
CVE-2011-3193CVE-2011-3193 | Exploitation statusNot confirmed | FixNot confirmed | Affected productNot confirmed | Published06/16/2012 | SeverityUnknown |
CVE-2010-2621CVE-2010-2621 | Exploitation statusNot confirmed | FixNot confirmed | Affected productNot confirmed | Published07/02/2010 | SeverityUnknown |
CVE-2009-2700CVE-2009-2700 | Exploitation statusNot confirmed | FixNot confirmed | Affected productNot confirmed | Published09/02/2009 | SeverityUnknown |
CVE-2007-0242CVE-2007-0242 | Exploitation statusNot confirmed | FixNot confirmed | Affected productNot confirmed | Published04/03/2007 | SeverityUnknown |
CVE-2006-4811CVE-2006-4811 | Exploitation statusNot confirmed | FixNot confirmed | Affected productNot confirmed | Published10/18/2006 | SeverityUnknown |
CyStack VulnScan continuously discovers assets, validates vulnerabilities, and helps security teams prioritize remediation across the organization.
Explore CyStack VulnScan