CVE-2026-105946: falha de média gravidade em qt
Out-of-bounds read vulnerability in NTLM authentication handling impacts Qt
Publicada em · Atualizada em
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
13Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackcvss 5.3epss 0.5%
Out-of-bounds read in the QAuthenticator NTLM authentication handling in the Qt Network module in Qt Group Qt allows remote attackers to obtain sensitive information (heap memory contents) or cause a denial of service (application crash) via a crafted NTLM challenge sent by a malicious server or proxy, when an application using QNetworkAccessManager or QTcpSocket authenticates with NTLM.
CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:A/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N/E:P
Produtos afetados
qt · qtCVEs relacionadas — qt
No mesmo produto, das mais perigosas para as menos.
CVE-2026-76151MEDIUMOut-of-bounds read (buffer over-read) vulnerability in HTTP Cache-Control response header parsing impacts Qt Framework (QtNetwork module)EPSS 0.7%CVE-2026-16762HIGHDenial-of-service vulnerability in the Qt Core QXmlStream parser (QXmlStreamReader) impacts QtEPSS 0.5%CVE-2026-78253LOWDenial-of-service (stack-exhaustion) vulnerability in QXmlStreamReader::readElementText() impacts QtEPSS 0.4%CVE-2026-19248HIGHUnbounded recursion vulnerability in the QDomNode destructor of Qt XML impacts QtEPSS 0.4%CVE-2026-8168HIGHDenial-of-service vulnerability in the SVG parser and renderer impacts QtEPSS 0.4%CVE-2026-11573HIGHUncontrolled recursion in QDomDocument/QDomNode serialization causes stack exhaustion (QtXml)EPSS 0.4%