https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T14:43:22.354349+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-342264 EUVD-2026-342264 2026-10-03T14:43:22.359480+00:00 EUVD-2026-342264 https://cve.radiocsirt.org/vuln/fkie_cve-2025-4211 fkie_cve-2025-4211 2026-10-03T14:43:22.359514+00:00

Improper Link Resolution Before File Access ('Link Following') vulnerability in QFileSystemEngine in the Qt corelib module on Windows which potentially allows Symlink Attacks and the use of Malicious Files. Issue originates from CVE-2024-38081. The vulnerability arises from the use of the GetTempPath API, which can be exploited by attackers to manipulate temporary file paths, potentially leading to unauthorized access and privilege escalation. The affected public API in the Qt Framework is QDir::tempPath() and anything that uses it, such as QStandardPaths with TempLocation, QTemporaryDir, and QTemporaryFile.

This issue affects all version of Qt up to and including 5.15.18, from 6.0.0 through 6.5.8, from 6.6.0 through 6.8.1. It is fixed in Qt 5.15.19, Qt 6.5.9, Qt 6.8.2, 6.9.0

 https://cve.radiocsirt.org/vuln/ghsa-8cgq-rf3m-gjm4 GHSA-8cgq-rf3m-gjm4 2026-10-03T14:43:22.359553+00:00

Improper Link Resolution Before File Access ('Link Following') vulnerability in QFileSystemEngine in the Qt corelib module on Windows which potentially allows Symlink Attacks and the use of Malicious Files. Issue originates from CVE-2024-38081. The vulnerability arises from the use of the GetTempPath API, which can be exploited by attackers to manipulate temporary file paths, potentially leading to unauthorized access and privilege escalation. The affected public API in the Qt Framework is QDir::tempPath() and anything that uses it, such as QStandardPaths with TempLocation, QTemporaryDir, and QTemporaryFile.This issue affects all version of Qt up to and including 5.15.18, from 6.0.0 through 6.5.8, from 6.6.0 through 6.8.1. It is fixed in Qt 5.15.19, Qt 6.5.9, Qt 6.8.2, 6.9.0

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2025-4211 UBUNTU-CVE-2025-4211 2026-10-03T14:43:22.359576+00:00

Affected: Ubuntu:Pro:16.04:LTS: qtbase-opensource-src, Ubuntu:16.04:LTS: qtbase-opensource-src-gles, Ubuntu:Pro:18.04:LTS: qtbase-opensource-src, Ubuntu:Pro:20.04:LTS: qtbase-opensource-src, Ubuntu:20.04:LTS: qtbase-opensource-src-gles, Ubuntu:22.04:LTS: qt6-base, Ubuntu:22.04:LTS: qtbase-opensource-src, Ubuntu:22.04:LTS: qtbase-opensource-src-gles, Ubuntu:24.04:LTS: qt6-base, Ubuntu:24.04:LTS: qtbase-opensource-src and 7 more

Improper Link Resolution Before File Access ('Link Following') vulnerability in QFileSystemEngine in the Qt corelib module on Windows which potentially allows Symlink Attacks and the use of Malicious Files. Issue originates from CVE-2024-38081. The vulnerability arises from the use of the GetTempPath API, which can be exploited by attackers to manipulate temporary file paths, potentially leading to unauthorized access and privilege escalation. The affected public API in the Qt Framework is QDir::tempPath() and anything that uses it, such as QStandardPaths with TempLocation, QTemporaryDir, and QTemporaryFile. This issue affects all version of Qt up to and including 5.15.18, from 6.0.0 through 6.5.8, from 6.6.0 through 6.8.1. It is fixed in Qt 5.15.19, Qt 6.5.9, Qt 6.8.2, 6.9.0

 https://cve.radiocsirt.org/vuln/wid-sec-w-2025-1094 WID-SEC-W-2025-1094 — QT: Schwachstelle ermöglicht Privilegieneskalation 2026-10-03T14:43:22.359622+00:00

Ein lokaler Angreifer kann eine Schwachstelle in QT ausnutzen, um seine Privilegien zu erhöhen.