Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
8.8
qt5-qtwebengine may misinterpret data and be exploited
published 4 days ago
Summary
The qt5-qtwebengine component used in some applications can incorrectly handle certain inputs, which could let an attacker run unwanted code. This risk exists in versions before the latest update. Upgrade to the newest qt5-qtwebengine package to protect your systems.
What to do
- Update cleanstart qt5-qtwebengine to version 5.15.14-r4.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| CleanStart | cleanstart | qt5-qtwebengine |
< 5.15.14-r4 Fix: upgrade to 5.15.14-r4
|
Original advisory text
Type confusion in V8 in Google Chrome prior to 114
Security vulnerability affects the qt5-qtwebengine package. Type confusion in V8 in Google Chrome prior to 114.
Internet-facing
14 days
Internal
At next upgrade
- Not known to be exploited
- Needs hands-on effort to exploit (estimated)
- Gives an attacker full control (estimated)
Timeline
Published31 Oct 2026
Updated31 Oct 2026
First seen31 Oct 2026
Sources
CLEANSTART-2024-XW70793 · OSV
Track software like this
Free during beta