Every public CVE, as it is published
The whole CVE List, enriched with NVD scores, CISA's known exploited catalog and EPSS exploit probabilities. Updated every few minutes; last read 5 min ago.
At a glance
Published CVEs; rejected ones are not counted.
- 406,615All CVEsplus 19,172 rejected
- 72Last 24 hours4,664 in the last 7 days
- 16,236Last 30 days1,434 of them critical
- 1,781Known exploitedin the CISA KEV catalog
CVEs published per year
All time, by publication date in UTC; follows the filter above.
- Critical
- High
- Medium
- Low
- Not scored
Show the numbers as a table
| Period | Critical | High | Medium | Low | Not scored | Total | Cumulative |
|---|---|---|---|---|---|---|---|
| 2026 | 0 | 8 | 15 | 17 | 0 | 40 | 52 |
| 2025 | 3 | 3 | 3 | 3 | 0 | 12 | 12 |
| Title | ||
|---|---|---|
| CVE-2026-103645 | Integer overflow vulnerability in QTextCodec fromUnicode() and toUnicode() impacts Qtqt · qt | Low1.1 |
| CVE-2026-97845 | Uncontrolled recursion vulnerability in QXmlSimpleReader XML parsing impacts Qtqt · qt | Medium4.3 |
| CVE-2026-114369 | Security Issue CVE-2026-114369 - Resource exhaustion (denial of service) vulnerability in the WebSocket handshake handling of QWebSocket and QWebSocketServer impacts Qt Frameworkqt · Qt Framework | Low2.7 |
| CVE-2026-82292 | NULL pointer dereference vulnerability in QDomDocument::setContent() XML parsing impacts Qtqt · qt | Low1.9 |
| CVE-2026-116337 | Uncontrolled resource consumption vulnerability in HTTP response handling of Qt Network impacts Qt Frameworkqt · Qt Framework | Low0.6 |
| CVE-2026-114366 | Information disclosure vulnerability in authentication handling of QWebSocket impacts Qt Frameworkqt · Qt Framework | Low2.3 |
| CVE-2026-107479 | Integer truncation vulnerability in QTextCodec conversion functions impacts Qt Frameworkqt · Qt | Low1.7 |
| CVE-2026-110944 | Resource exhaustion vulnerability in HTTP request handling impacts Qt HTTP Server (QHttpServer)qt · Qt Framework | Low2.7 |
| CVE-2026-103653 | Out-of-bounds read vulnerability in CoAP message parsing impacts Qt CoAPqt · Qt | Medium6.7 |
| CVE-2026-100140 | Integer overflow vulnerability in XML parsing functionality of Qt5Compat impacts Qtqt · qt | Low1.9 |
| CVE-2026-107457 | Memory corruption vulnerability in QMqttClient impacts Qt MQTTqt · Qt | Low2.3 |
| CVE-2026-111487 | Out-of-bounds write vulnerability in the assimp scene import plugin of Qt3D impacts Qt Frameworkqt · Qt Framework | Medium4.3 |
| CVE-2026-105924 | NULL pointer dereference vulnerability in QCborValue to JSON conversion impacts Qtqt · Qt | Medium4.3 |
| CVE-2026-107590 | Out-of-bounds write vulnerability in QTextCodec iconv-based encoding impacts Qtqt · Qt | Low1.9 |
| CVE-2026-107472 | Out-of-bounds read vulnerability in QTextCodec TSCII encoding impacts Qtqt · Qt | Medium4.3 |
| CVE-2026-105946 | Out-of-bounds read vulnerability in NTLM authentication handling impacts Qtqt · qt | Medium5.3 |
| CVE-2026-107157 | Out-of-bounds read vulnerability in QCborValue::fromCbor() impacts Qt Frameworkqt · Qt | Low2.0 |
| CVE-2026-96432 | Null pointer dereference vulnerability in QNetworkAccessManager impacts Qtqt · qt | Low2.1 |
| CVE-2026-95620 | Use-after-free vulnerability in QNetworkAccessManager HTTP/2 support impacts Qtqt · qt | Low2.1 |
| CVE-2026-16762 | Denial-of-service vulnerability in the Qt Core QXmlStream parser (QXmlStreamReader) impacts Qtqt · qt | High8.7 |
| CVE-2026-105923 | Null-pointer dereference in QTriangulator reachable through VectorImageqt · Qt | Medium4.0 |
| CVE-2026-101201 | QBinaryJson::fromBinaryData() integer overflow leading to OOB readqt · qt | Medium4.3 |
| CVE-2026-8168 | Denial-of-service vulnerability in the SVG parser and renderer impacts Qtqt · qt | High7.1 |
| CVE-2026-94370 | Memory corruption (double free / use-after-free) vulnerability in core string handling impacts Qt for MCUsqt · Qt_for_MCUs | Medium6.5 |
| CVE-2026-19395 | An empty <img> attribute value in styled text triggers a parser error that halts the device.qt · Qt for MCUs | Medium6.6 |
| CVE-2026-95509 | Out-of-bounds read vulnerability in string formatting impacts Qt for MCUsqt · Qt for MCUs | High8.8 |
| CVE-2026-79680 | Authentication bypass vulnerability in the password authentication mechanism of the Qt VNC Server moduleqt · qt | Medium4.5 |
| CVE-2026-78253 | Denial-of-service (stack-exhaustion) vulnerability in QXmlStreamReader::readElementText() impacts Qtqt · qt | Low2.3 |
| CVE-2026-79616 | Out-of-bounds read vulnerability in Context2D.path and PathSvg.path properties impacts Qt Quickqt · qt | Low0.6 |
| CVE-2026-76151 | Out-of-bounds read (buffer over-read) vulnerability in HTTP Cache-Control response header parsing impacts Qt Framework (QtNetwork module)qt · qt | Medium4.6 |
| CVE-2026-19248 | Unbounded recursion vulnerability in the QDomNode destructor of Qt XML impacts Qtqt · qt | High7.1 |
| CVE-2026-13326 | Out-of-bounds read and integer underflow vulnerability in QNdefNfcTextRecord impacts Qt NFC moduleqt · qt | Medium6.9 |
| CVE-2026-11573 | Uncontrolled recursion in QDomDocument/QDomNode serialization causes stack exhaustion (QtXml)qt · qt | High7.1 |
| CVE-2026-15037 | XML injection vulnerability in QDom comment, CDATA and processing-instruction serializationQt · Qt | Low2.9 |
| CVE-2026-9499 | Out-of-bounds read in QTextCodec::codecForName() in QtQt · Qt | Medium6.3 |
| CVE-2026-12379 | URL Redirection to Untrusted Site ('Open Redirect') vulnerability in the Dashboard OAuth/OIDC implementation of AxivionQt · Axivion | Medium6.8 |
| CVE-2026-12593 | Privilege escalation via forged API token creation in Axivion Dashboard OIDC/OAuth2/SSO subsystemQt · Axivion | High8.7 |
| CVE-2025-14575 | Uncontrolled Search Path Element in Qt Network OpenSSL TLS backend allows rogue CA certificate loadingQt · Qt | Low1.8 |
| CVE-2026-6210 | Type confusion and heap-buffer-overflow in Qt SVG marker handling causing application crashQt · Qt | High8.7 |
| CVE-2025-14576 | Possible QML code injection in VectorImage componentQt · Qt | High7.4 |
| CVE-2025-12385 | Improper validation of <img> tag size in Text component parserQt · Qt | High8.7 |
| CVE-2025-23050 | QLowEnergyController in Qt before 6.8.2 mishandles malformed Bluetooth ATT commands, leading to an out-of-bounds read (or division by zero). This is fixed in…Qt · Qt | Low3.1 |
| CVE-2025-6338 | Possible denial of service with multiple incoming connections to a Schannel based server with a TLS backendQt · Qt | Critical9.2 |
| CVE-2025-10729 | Use-after-free vulnerability in Qt SVG qsvghandler.cpp allows denial of service via crafted SVGQt · Qt | Critical9.4 |
| CVE-2025-10728 | Uncontrolled recursion in Qt SVG moduleQt · Qt | Critical9.4 |
| CVE-2025-5992 | Passing values outside of expected range to QColorTransferGenericFunction can cause a denial of serviceQt · Qt | Low2.3 |
| CVE-2025-5991 | Use after free in QHttp2ProtocolHandlerQt · Qt | Low2.1 |
| CVE-2025-5683 | When loading a specifically crafted ICNS format image file in QImage then it will trigger a crash. This issue affects Qt from versions 6.3.0 through 6.5.9,…Qt · Qt | Medium5.1 |
| CVE-2025-5455 | Possible denial of service when passing malformed data in a URL to qDecodeDataUrlQt · Qt | High8.4 |
| CVE-2025-4211 | Improper Link Resolution Before File Access in QFileSystemEngine on WindowsQt · Qt | High7.3 |