Q
Vendor security profile
qt
Product portfolio, patch evidence and exploitation signals in a single security scorecard
The data is combined from the CVE Program, NVD, CISA KEV and vendor security advisories.
Total CVEs14
Critical1
CISA KEV0
Public exploit1
Patch rate%86
Avg. CVSS6.2
12-month vulnerability rate
0
0
0
0
0
1
0
0
0
0
8
1
CVE KEV
CVE severity distribution
14toplam CVE
Critical1 (7%)
High6 (43%)
Medium5 (36%)
Low2 (14%)
Patch and exploitation view
%86
Verified patch
%0
CISA KEV
%7
Public exploit
12Patch available
0Partial
0Workaround
0Vendor: no patch
2Unknown
Latest vulnerabilities
6.6
CVE-2026-19395
An empty <img> attribute value in styled text triggers a parser error that halts the device.
Q
Patch status unknownEPSS %0
8.8
CVE-2026-95509
Out-of-bounds read vulnerability in string formatting impacts Qt for MCUs
Q
Patch status unknownEPSS %0
4.5
CVE-2026-79680
Authentication bypass vulnerability in the password authentication mechanism of the Qt VNC Server module
Q
Patch verifiedEPSS %0
2.3
CVE-2026-78253
Denial-of-service (stack-exhaustion) vulnerability in QXmlStreamReader::readElementText() impacts Qt
Q
Patch verifiedEPSS %0
0.6
CVE-2026-79616
Out-of-bounds read vulnerability in Context2D.path and PathSvg.path properties impacts Qt Quick
Q
Patch verifiedEPSS %0
4.6
CVE-2026-76151
Out-of-bounds read (buffer over-read) vulnerability in HTTP Cache-Control response header parsing impacts Qt Framework (QtNetwork module)
Q
Patch verifiedEPSS %1
7.1
CVE-2026-19248
Unbounded recursion vulnerability in the QDomNode destructor of Qt XML impacts Qt
Q
Patch verifiedEPSS %0
6.9
CVE-2026-13326
Out-of-bounds read and integer underflow vulnerability in QNdefNfcTextRecord impacts Qt NFC module
Q
Patch verifiedEPSS %0
7.1
CVE-2026-11573
Uncontrolled recursion in QDomDocument/QDomNode serialization causes stack exhaustion (QtXml)
Q
Patch verifiedEPSS %0
7.8
CVE-2025-14576
Improper input validation in Qtdeclarative
Q
Patch verifiedEPSS %0