| CVE-2025-14575 |
An Uncontrolled Search Path Element vulnerability in the OpenSSL TLS backend of Qt Network (qtbase) in Qt Qt Framework…
|
1.8
Low
|
May 19, 2026 |
| CVE-2026-6210 |
A type confusion vulnerability in Qt SVG allows an attacker to cause an application crash via a crafted SVG image
|
8.7
High
|
May 6, 2026 |
| CVE-2025-14576 |
Insufficient validation of node IDs in Qt SVG module allows arbitrary QML/JavaScript code injection when loading…
|
7.4
High
|
Apr 30, 2026 |
| CVE-2025-12385 |
Allocation of Resources Without Limits or Throttling, Improper Validation of Specified Quantity in Input vulnerability…
|
8.7
High
|
Dec 3, 2025 |
| CVE-2025-6338 |
There is an incomplete cleanup vulnerability in Qt Network's Schannel support on Windows which can lead to a Denial of…
|
9.2
Critical
|
Oct 16, 2025 |
| CVE-2025-10729 |
The module will parse a <pattern> node which is not a child of a structural node
|
9.4
Critical
|
Oct 3, 2025 |
| CVE-2025-10728 |
When the module renders a Svg file that contains a element, it might end up rendering it recursively leading to stack…
|
9.4
Critical
|
Oct 3, 2025 |
| CVE-2025-5992 |
When passing values outside of the expected range to QColorTransferGenericFunction it can cause a denial of service, for…
|
2.3
Low
|
Jul 11, 2025 |
| CVE-2025-5991 |
There is a "Use After Free" vulnerability in Qt's QHttp2ProtocolHandler in the QtNetwork module
|
2.1
Low
|
Jun 11, 2025 |
| CVE-2025-5683 |
When loading a specifically crafted ICNS format image file in QImage then it will trigger a crash. This issue affects…
|
5.1
Medium
|
Jun 5, 2025 |
| CVE-2025-5455 |
An issue was found in the private API function qDecodeDataUrl() in QtCore, which is used in QTextDocument and…
|
8.4
High
|
Jun 2, 2025 |
| CVE-2025-4211 |
Improper Link Resolution Before File Access ('Link Following') vulnerability in QFileSystemEngine in the Qt corelib…
|
7.3
High
|
May 16, 2025 |
| CVE-2025-3512 |
There is a Heap-based Buffer Overflow vulnerability in QTextMarkdownImporter
|
4.8
Medium
|
Apr 11, 2025 |