High
Security advisory
A keystroke logging issue was discovered in Virtual Keyboard in Qt 5.7.x, 5.8.x, 5.9.x, 5.10.x, and 5.11.x before 5.11.3.
- Products
- Not specified
- Affected versions
- Not specified
- Fixed versions
- Not specified
- CVEs
- CVE-2018-19865
- Confirmed fixed CVEs
- Not specified
- Updated in this feed
- 1 Nov 2026, 06:26 UTC · Revision 1
Source evidence
A keystroke logging issue was discovered in Virtual Keyboard in Qt 5.7.x, 5.8.x, 5.9.x, 5.10.x, and 5.11.x before 5.11.3.
osv:CVE-2018-19865
Complete source record
{
"id": "926d383d1d3150287c594180c15b1598f9c4c933e870cf8f523f7c6000f0d694",
"url": "https://osv.dev/vulnerability/CVE-2018-19865",
"method": "structured",
"payload": {
"kind": "advisory",
"title": "CVE-2018-19865",
"summary": "A keystroke logging issue was discovered in Virtual Keyboard in Qt 5.7.x, 5.8.x, 5.9.x, 5.10.x, and 5.11.x before 5.11.3.",
"evidence": "osv:CVE-2018-19865",
"products": [],
"severity": "high",
"structured": {
"id": "CVE-2018-19865",
"aliases": [
"CVE-2018-19865"
],
"metrics": [
{
"type": "CVSS_V3",
"score": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N"
}
],
"affected": [
{
"ranges": [
{
"repo": "https://github.com/qt/qt5",
"type": "GIT",
"events": [
{
"introduced": "1d5ed0cde07131377ec7ee6937fff21e4c69ab69"
},
{
"last_affected": "bf3d2588cc061d1c90c314c9abfdb87cdbac6004"
},
{
"introduced": "5bb74ad51f3a976b261c3072d3b49fd9d4c84d0d"
},
{
"last_affected": "665d37303493f9d3ff4a244c8288898d3f41cd8f"
},
{
"introduced": "adcdf7b49f52e745009ff7e37e07c2d831ad82dc"
},
{
"last_affected": "f2dbac41cf12de7fde39eaad4226b409cedbbe92"
},
{
"introduced": "081601ba0e368dc99c5dc0333b65584764f43fc9"
},
{
"fixed": "1deea3debce6bfd0fd45545b3a8e1de80380a9a5"
},
{
"introduced": "ee19f88fe0d1cc1ac28414c691fb5896d98ee242"
},
{
"last_affected": "ee19f88fe0d1cc1ac28414c691fb5896d98ee242"
}
],
"database_specific": {
"extracted_events": [
{
"cpe": "cpe:2.3:a:qt:qt:*:*:*:*:*:*:*:*",
"range": [
{
"introduced": "5.7.0"
},
{
"last_affected": "5.7.1"
}
],
"source": "CPE_RANGE"
},
{
"cpe": "cpe:2.3:a:qt:qt:*:*:*:*:*:*:*:*",
"range": [
{
"introduced": "5.9.0"
},
{
"last_affected": "5.9.7"
}
],
"source": "CPE_RANGE"
},
{
"cpe": "cpe:2.3:a:qt:qt:*:*:*:*:*:*:*:*",
"range": [
{
"introduced": "5.10.0"
},
{
"last_affected": "5.10.1"
}
],
"source": "CPE_RANGE"
},
{
"cpe": "cpe:2.3:a:qt:qt:*:*:*:*:*:*:*:*",
"range": [
{
"introduced": "5.11.0"
},
{
"fixed": "5.11.3"
}
],
"source": "CPE_RANGE"
},
{
"cpe": "cpe:2.3:a:qt:qt:5.8.0:*:*:*:*:*:*:*",
"range": [
{
"introduced": "5.8.0"
},
{
"last_affected": "5.8.0"
}
],
"source": "CPE_STRING"
}
]
}
}
],
"versions": [
"5.8.0",
"v5.8.0"
],
"database_specific": {
"source": "https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2018-19865.json"
}
},
{
"ranges": [
{
"repo": "https://github.com/qt/qtbase",
"type": "GIT",
"events": [
{
"introduced": "6c1e352803a6efbd8b14e5296434e22165b65084"
},
{
"last_affected": "a55f36211efe1bb0d6717c8545366120bd6dfd9f"
},
{
"introduced": "f6b36eaafec24b4c67efff621d380a4ca4257d0b"
},
{
"last_affected": "81b29a44d248b5037a2f05dd8815e000d9472f0e"
},
{
"introduced": "50117d738af526cbfbd5afa50b9a501acb0fb9ce"
},
{
"last_affected": "6c6ace9d23f90845fd424e474d38fe30f070775e"
},
{
"introduced": "6eef81ee1c82f934e14d47047d8b6103b8755321"
},
{
"fixed": "08de243eaa007597c2bfbc97d3d14e2f821ac4be"
},
{
"introduced": "49dc9aa409d727824f26b246054a22b5a7dd5980"
},
{
"last_affected": "49dc9aa409d727824f26b246054a22b5a7dd5980"
}
],
"database_specific": {
"extracted_events": [
{
"cpe": "cpe:2.3:a:qt:qt:*:*:*:*:*:*:*:*",
"range": [
{
"introduced": "5.7.0"
},
{
"last_affected": "5.7.1"
}
],
"source": "CPE_RANGE"
},
{
"cpe": "cpe:2.3:a:qt:qt:*:*:*:*:*:*:*:*",
"range": [
{
"introduced": "5.9.0"
},
{
"last_affected": "5.9.7"
}
],
"source": "CPE_RANGE"
},
{
"cpe": "cpe:2.3:a:qt:qt:*:*:*:*:*:*:*:*",
"range": [
{
"introduced": "5.10.0"
},
{
"last_affected": "5.10.1"
}
],
"source": "CPE_RANGE"
},
{
"cpe": "cpe:2.3:a:qt:qt:*:*:*:*:*:*:*:*",
"range": [
{
"introduced": "5.11.0"
},
{
"fixed": "5.11.3"
}
],
"source": "CPE_RANGE"
},
{
"cpe": "cpe:2.3:a:qt:qt:5.8.0:*:*:*:*:*:*:*",
"range": [
{
"introduced": "5.8.0"
},
{
"last_affected": "5.8.0"
}
],
"source": "CPE_STRING"
}
]
}
}
],
"versions": [
"5.8.0",
"v5.8.0"
],
"database_specific": {
"source": "https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2018-19865.json"
}
}
],
"modified": "2026-10-24T10:30:39.422434727Z",
"provider": "osv",
"references": [
"https://codereview.qt-project.org/#/c/243666/",
"https://codereview.qt-project.org/#/c/244569/",
"https://codereview.qt-project.org/#/c/244687/",
"https://codereview.qt-project.org/#/c/244845/",
"https://codereview.qt-project.org/#/c/245283/",
"https://codereview.qt-project.org/#/c/245293/",
"https://codereview.qt-project.org/#/c/245312/",
"https://codereview.qt-project.org/#/c/245638/",
"https://codereview.qt-project.org/#/c/245640/",
"https://codereview.qt-project.org/#/c/246630/"
],
"provider_metadata": {
"unresolved_ranges": [
{
"cpes": [
"cpe:2.3:o:opensuse:leap:15.0:*:*:*:*:*:*:*"
],
"vendor_product": "opensuse:leap",
"extracted_events": [
{
"range": [
{
"introduced": "15.0"
},
{
"last_affected": "15.0"
}
],
"source": "CPE_STRING"
}
]
}
]
}
},
"related_cves": [
{
"value": "CVE-2018-19865",
"evidence": "/id"
}
],
"security_relevant": true,
"severity_evidence": "/severity/0/score"
},
"source_id": "core-osv",
"document_id": 434665,
"published_at": "2018-12-05T11:29:06.017+00:00"
}