CVE-2018-19865
published 2018-12-05CVE-2018-19865: A keystroke logging issue was discovered in Virtual Keyboard in Qt 5.7.x, 5.8.x, 5.9.x, 5.10.x, and 5.11.x before 5.11.3.
PriorityP340high7.5CVSS 3.0
AVNACLPRNUINSUCHINAN
EPSS
2.17%
80.3th percentile
A keystroke logging issue was discovered in Virtual Keyboard in Qt 5.7.x, 5.8.x, 5.9.x, 5.10.x, and 5.11.x before 5.11.3.
Affected
7 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| debian | qtvirtualkeyboard-opensource-src | < qtvirtualkeyboard-opensource-src 5.11.3+dfsg-2 (bookworm) | qtvirtualkeyboard-opensource-src 5.11.3+dfsg-2 (bookworm) |
| opensuse | leap | — | — |
| qt | qt | — | — |
| qt | qt | 5.10.0 – 5.10.1 | — |
| qt | qt | >= 5.11.0 < 5.11.3 | 5.11.3 |
| qt | qt | 5.7.0 – 5.7.1 | — |
| qt | qt | 5.9.0 – 5.9.7 | — |
CVSS provenance
nvdv3.07.5HIGHCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
nvdv2.05.0MEDIUMAV:N/AC:L/Au:N/C:P/I:N/A:N
osv7.5HIGH
vendor_debian7.5HIGH
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
GHSA-f68g-4p63-5wh7: A keystroke logging issue was discovered in Virtual Keyboard in Qt 5
ghsa_unreviewed·2022-05-14
CVE-2018-19865 [HIGH] CWE-532 GHSA-f68g-4p63-5wh7: A keystroke logging issue was discovered in Virtual Keyboard in Qt 5
A keystroke logging issue was discovered in Virtual Keyboard in Qt 5.7.x, 5.8.x, 5.9.x, 5.10.x, and 5.11.x before 5.11.3.
OSV
CVE-2018-19865: A keystroke logging issue was discovered in Virtual Keyboard in Qt 5
osv·2018-12-05·CVSS 7.5
CVE-2018-19865 [HIGH] CVE-2018-19865: A keystroke logging issue was discovered in Virtual Keyboard in Qt 5
A keystroke logging issue was discovered in Virtual Keyboard in Qt 5.7.x, 5.8.x, 5.9.x, 5.10.x, and 5.11.x before 5.11.3.
Debian
CVE-2018-19865: qtvirtualkeyboard-opensource-src - A keystroke logging issue was discovered in Virtual Keyboard in Qt 5.7.x, 5.8.x,...
vendor_debian·2018·CVSS 7.5
CVE-2018-19865 [HIGH] CVE-2018-19865: qtvirtualkeyboard-opensource-src - A keystroke logging issue was discovered in Virtual Keyboard in Qt 5.7.x, 5.8.x,...
A keystroke logging issue was discovered in Virtual Keyboard in Qt 5.7.x, 5.8.x, 5.9.x, 5.10.x, and 5.11.x before 5.11.3.
Scope: local
bookworm: resolved (fixed in 5.11.3+dfsg-2)
bullseye: resolved (fixed in 5.11.3+dfsg-2)
forky: resolved (fixed in 5.11.3+dfsg-2)
sid: resolved (fixed in 5.11.3+dfsg-2)
trixie: resolved (fixed in 5.11.3+dfsg-2)
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
http://blog.qt.io/blog/2018/12/04/qt-5-11-3-released-important-security-updates/http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00085.htmlhttp://lists.opensuse.org/opensuse-security-announce/2019-04/msg00086.htmlhttps://codereview.qt-project.org/#/c/243666/https://codereview.qt-project.org/#/c/244569/https://codereview.qt-project.org/#/c/244687/https://codereview.qt-project.org/#/c/244845/https://codereview.qt-project.org/#/c/245283/https://codereview.qt-project.org/#/c/245293/https://codereview.qt-project.org/#/c/245312/https://codereview.qt-project.org/#/c/245638/https://codereview.qt-project.org/#/c/245640/https://codereview.qt-project.org/#/c/246630/http://blog.qt.io/blog/2018/12/04/qt-5-11-3-released-important-security-updates/http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00085.htmlhttp://lists.opensuse.org/opensuse-security-announce/2019-04/msg00086.htmlhttps://codereview.qt-project.org/#/c/243666/https://codereview.qt-project.org/#/c/244569/https://codereview.qt-project.org/#/c/244687/https://codereview.qt-project.org/#/c/244845/https://codereview.qt-project.org/#/c/245283/https://codereview.qt-project.org/#/c/245293/https://codereview.qt-project.org/#/c/245312/https://codereview.qt-project.org/#/c/245638/https://codereview.qt-project.org/#/c/245640/https://codereview.qt-project.org/#/c/246630/
2018-12-05
Published