Read the docs

qt

Records107All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical10CVSS 9.0–10.0
CVSS high32CVSS 7.0–8.9

Exploited now

qt records in CISA KEV

No qt vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Qt 58 records HIGH Qtbase 1 record LOW Qtdeclarative 1 record LOW Qtsvg 1 record LOW Qtwebkit 1 record LOW Qxmlsimplereader 1 record LOW

Records

1 record in Qtdeclarative · all components

TI-2025-13317 CVE-2025-14576 · GHSA-4hpm-v49g-rq7q

Possible QML code injection in VectorImage component

Priority LOW 34

Insufficient validation of node IDs in Qt SVG module allows arbitrary QML/JavaScript code injection when loading malicious SVG files through the VectorImage component in Qt Quick.

CVSS 4.0HIGH 7.4 Local No auth User interaction EPSS 0.00224 Published 2026-04-30 Fixed CWE-20
Open these records in search →