Uncontrolled search path in the QT Library before 5.14.0, 5.12.7 and 5.9.10 may allow an authenticated user to potentially enable elevation of privilege via local access.
Fix
Patch, vendor advisory and mitigation references on NVD 6
- https://bugreports.qt.io/browse/QTBUG-81272 Exploit, Patch, Vendor Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=1800604 Issue Tracking, Patch, Third Party Advisory
- https://lists.qt-project.org/pipermail/development/2020-January/038534.html Mailing List, Vendor Advisory
- https://bugreports.qt.io/browse/QTBUG-81272 Exploit, Patch, Vendor Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=1800604 Issue Tracking, Patch, Third Party Advisory
- https://lists.qt-project.org/pipermail/development/2020-January/038534.html Mailing List, Vendor Advisory
Every line above is quoted from NVD, CISA, Microsoft, the vendor's own advisory or DISA; nothing is generated.
Change history 1
- First seenCVSS 7.3 · qt, redhatNVD modified 2026-10-08 21:17
Affected (CPE criteria) 3
cpe:2.3:a:qt:qt:*:*:*:*:*:*:*:*cpe:2.3:o:redhat:enterprise_linux:7.0:*:*:*:*:*:*:*cpe:2.3:o:redhat:enterprise_linux:8.0:*:*:*:*:*:*:*
References 6
- https://bugreports.qt.io/browse/QTBUG-81272 Exploit, Patch, Vendor Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=1800604 Issue Tracking, Patch, Third Party Advisory
- https://lists.qt-project.org/pipermail/development/2020-January/038534.html Mailing List, Vendor Advisory
- https://bugreports.qt.io/browse/QTBUG-81272 Exploit, Patch, Vendor Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=1800604 Issue Tracking, Patch, Third Party Advisory
- https://lists.qt-project.org/pipermail/development/2020-January/038534.html Mailing List, Vendor Advisory