https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-04T02:46:04.953168+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/alsa-2023:6369 ALSA-2023:6369 — Moderate: qt5 security and bug fix update 2026-10-04T02:46:05.304282+00:00

Affected: AlmaLinux:9: qt5, AlmaLinux:9: qt5-devel, AlmaLinux:9: qt5-qtbase, AlmaLinux:9: qt5-qtbase-common, AlmaLinux:9: qt5-qtbase-devel, AlmaLinux:9: qt5-qtbase-examples, AlmaLinux:9: qt5-qtbase-gui, AlmaLinux:9: qt5-qtbase-mysql, AlmaLinux:9: qt5-qtbase-odbc, AlmaLinux:9: qt5-qtbase-postgresql and 4 more

Qt is a software toolkit for developing applications.

Security Fix(es):

* qt: buffer over-read via a crafted reply from a DNS server (CVE-2023-33285) * qt: allows remote attacker to bypass security restrictions caused by flaw in certificate validation (CVE-2023-34410) * qtbase: buffer overflow in QXmlStreamReader (CVE-2023-37369) * qtbase: infinite loops in QXmlStreamReader (CVE-2023-38197) * qt: Uninitialized variable usage in m_unitsPerEm (CVE-2023-32573)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.

 https://cve.radiocsirt.org/vuln/bdu:2023-09121 bdu:2023-09121 2026-10-04T02:46:05.304375+00:00 bdu:2023-09121 https://cve.radiocsirt.org/vuln/certfr-2026-avi-0218 certfr-2026-avi-0218 — De multiples vulnérabilités ont été découvertes dans les produits VMware. Certaines d'entre elles permettent à un attaq… 2026-10-04T02:46:05.304393+00:00 certfr-2026-avi-0218 https://cve.radiocsirt.org/vuln/euvd-2026-8819 EUVD-2026-8819 2026-10-04T02:46:05.304412+00:00 EUVD-2026-8819 https://cve.radiocsirt.org/vuln/fkie_cve-2023-37369 fkie_cve-2023-37369 2026-10-04T02:46:05.304423+00:00

In Qt before 5.15.15, 6.x before 6.2.9, and 6.3.x through 6.5.x before 6.5.2, there can be an application crash in QXmlStreamReader via a crafted XML string that triggers a situation in which a prefix is greater than a length.

 https://cve.radiocsirt.org/vuln/ghsa-h6px-w542-49xj GHSA-h6px-w542-49xj 2026-10-04T02:46:05.304444+00:00

In Qt before 5.15.15, 6.x before 6.2.9, and 6.3.x through 6.5.x before 6.5.2, there can be an application crash in QXmlStreamReader via a crafted XML string that triggers a situation in which a prefix is greater than a length.

 https://cve.radiocsirt.org/vuln/gsd-2023-37369 gsd-2023-37369 2026-10-04T02:46:05.304458+00:00 gsd-2023-37369 https://cve.radiocsirt.org/vuln/msrc_cve-2023-37369 msrc_CVE-2023-37369 — In Qt before 5.15.15 6.x before 6.2.9 and 6.3.x through 6.5.x before 6.5.2 there can be an application crash in QXmlStr… 2026-10-04T02:46:05.304468+00:00 msrc_CVE-2023-37369 https://cve.radiocsirt.org/vuln/oesa-2023-1610 OESA-2023-1610 — qt5-qtbase security update 2026-10-04T02:46:05.304485+00:00

Affected: openEuler:20.03-LTS-SP1: qt5-qtbase, openEuler:20.03-LTS-SP3: qt5-qtbase, openEuler:22.03-LTS: qt5-qtbase, openEuler:22.03-LTS-SP1: qt5-qtbase, openEuler:22.03-LTS-SP2: qt5-qtbase

This package provides base tools, such as string, xml, and network handling. Security Fix(es): In Qt before 5.15.15, 6.x before 6.2.9, and 6.3.x through 6.5.x before 6.5.2, there can be an application crash in QXmlStreamReader via a crafted XML string that triggers a situation in which a prefix is greater than a length.(CVE-2023-37369)

 https://cve.radiocsirt.org/vuln/opensuse-su-2024:13147-1 openSUSE-SU-2024:13147-1 — libQt6Concurrent6-6.5.2-2.1 on GA media 2026-10-04T02:46:05.304512+00:00

libQt6Concurrent6-6.5.2-2.1 on GA media

 https://cve.radiocsirt.org/vuln/rlsa-2023:6369 RLSA-2023:6369 — Moderate: qt5 security and bug fix update 2026-10-04T02:46:05.304529+00:00

Affected: Rocky Linux:9: adwaita-qt, Rocky Linux:9: python-pyqt5-sip, Rocky Linux:9: python-qt5, Rocky Linux:9: qgnomeplatform, Rocky Linux:9: qt5, Rocky Linux:9: qt5-doc, Rocky Linux:9: qt5-qtconnectivity, Rocky Linux:9: qt5-qtdeclarative, Rocky Linux:9: qt5-qtdoc, Rocky Linux:9: qt5-qtgraphicaleffects and 16 more

Qt is a software toolkit for developing applications.

Security Fix(es):

* qt: buffer over-read via a crafted reply from a DNS server (CVE-2023-33285)

* qt: allows remote attacker to bypass security restrictions caused by flaw in certificate validation (CVE-2023-34410)

* qtbase: buffer overflow in QXmlStreamReader (CVE-2023-37369)

* qtbase: infinite loops in QXmlStreamReader (CVE-2023-38197)

* qt: Uninitialized variable usage in m_unitsPerEm (CVE-2023-32573)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the Rocky Linux 9.3 Release Notes linked from the References section.

 https://cve.radiocsirt.org/vuln/suse-su-2023:4622-1 SUSE-SU-2023:4622-1 — Security update for libqt4 2026-10-04T02:46:05.304585+00:00

Security update for libqt4

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2023-37369 UBUNTU-CVE-2023-37369 2026-10-04T02:46:05.304604+00:00

Affected: Ubuntu:14.04:LTS: qt4-x11, Ubuntu:16.04:LTS: qt4-x11, Ubuntu:Pro:16.04:LTS: qtbase-opensource-src, Ubuntu:16.04:LTS: qtbase-opensource-src-gles, Ubuntu:Pro:18.04:LTS: qtbase-opensource-src, Ubuntu:18.04:LTS: qt4-x11, Ubuntu:Pro:20.04:LTS: qtbase-opensource-src, Ubuntu:20.04:LTS: qtbase-opensource-src-gles, Ubuntu:22.04:LTS: qt6-base, Ubuntu:22.04:LTS: qtbase-opensource-src and 7 more

In Qt before 5.15.15, 6.x before 6.2.9, and 6.3.x through 6.5.x before 6.5.2, there can be an application crash in QXmlStreamReader via a crafted XML string that triggers a situation in which a prefix is greater than a length.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2023-2066 WID-SEC-W-2023-2066 — QT: Schwachstelle ermöglicht Denial of Service 2026-10-04T02:46:05.304644+00:00

Ein entfernter, anonymer Angreifer kann eine Schwachstelle in QT ausnutzen, um einen Denial of Service Angriff durchzuführen.