{"id":"CVE-2018-19865","details":"A keystroke logging issue was discovered in Virtual Keyboard in Qt 5.7.x, 5.8.x, 5.9.x, 5.10.x, and 5.11.x before 5.11.3.","modified":"2026-07-08T05:55:19.578499779Z","published":"2018-12-05T11:29:06.017Z","related":["openSUSE-SU-2019:1259-1","openSUSE-SU-2019:1263-1"],"database_specific":{"unresolved_ranges":[{"cpes":["cpe:2.3:o:opensuse:leap:15.0:*:*:*:*:*:*:*"],"extracted_events":[{"introduced":"15.0"},{"last_affected":"15.0"}],"source":"CPE_STRING","vendor_product":"opensuse:leap"}]},"references":[{"type":"ADVISORY","url":"http://blog.qt.io/blog/2018/12/04/qt-5-11-3-released-important-security-updates/"},{"type":"ADVISORY","url":"http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00085.html"},{"type":"ADVISORY","url":"http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00086.html"},{"type":"FIX","url":"https://codereview.qt-project.org/#/c/243666/"},{"type":"FIX","url":"https://codereview.qt-project.org/#/c/244569/"},{"type":"FIX","url":"https://codereview.qt-project.org/#/c/244687/"},{"type":"FIX","url":"https://codereview.qt-project.org/#/c/244845/"},{"type":"FIX","url":"https://codereview.qt-project.org/#/c/245283/"},{"type":"FIX","url":"https://codereview.qt-project.org/#/c/245293/"},{"type":"FIX","url":"https://codereview.qt-project.org/#/c/245312/"},{"type":"FIX","url":"https://codereview.qt-project.org/#/c/245638/"},{"type":"FIX","url":"https://codereview.qt-project.org/#/c/245640/"},{"type":"FIX","url":"https://codereview.qt-project.org/#/c/246630/"}],"affected":[{"ranges":[{"type":"GIT","repo":"https://github.com/qt/qt5","events":[{"introduced":"1d5ed0cde07131377ec7ee6937fff21e4c69ab69"},{"last_affected":"bf3d2588cc061d1c90c314c9abfdb87cdbac6004"},{"introduced":"5bb74ad51f3a976b261c3072d3b49fd9d4c84d0d"},{"last_affected":"665d37303493f9d3ff4a244c8288898d3f41cd8f"},{"introduced":"adcdf7b49f52e745009ff7e37e07c2d831ad82dc"},{"last_affected":"f2dbac41cf12de7fde39eaad4226b409cedbbe92"},{"introduced":"081601ba0e368dc99c5dc0333b65584764f43fc9"},{"fixed":"1deea3debce6bfd0fd45545b3a8e1de80380a9a5"},{"introduced":"ee19f88fe0d1cc1ac28414c691fb5896d98ee242"},{"last_affected":"ee19f88fe0d1cc1ac28414c691fb5896d98ee242"}],"database_specific":{"cpe":["cpe:2.3:a:qt:qt:*:*:*:*:*:*:*:*","cpe:2.3:a:qt:qt:5.8.0:*:*:*:*:*:*:*"],"extracted_events":[{"introduced":"5.7.0"},{"last_affected":"5.7.1"},{"introduced":"5.9.0"},{"last_affected":"5.9.7"},{"introduced":"5.10.0"},{"last_affected":"5.10.1"},{"introduced":"5.11.0"},{"fixed":"5.11.3"},{"introduced":"5.8.0"},{"last_affected":"5.8.0"}],"source":["CPE_RANGE","CPE_STRING"]}}],"versions":["5.8.0","v5.8.0"],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2018-19865.json"}},{"ranges":[{"type":"GIT","repo":"https://github.com/qt/qtbase","events":[{"introduced":"6c1e352803a6efbd8b14e5296434e22165b65084"},{"last_affected":"a55f36211efe1bb0d6717c8545366120bd6dfd9f"},{"introduced":"f6b36eaafec24b4c67efff621d380a4ca4257d0b"},{"last_affected":"81b29a44d248b5037a2f05dd8815e000d9472f0e"},{"introduced":"50117d738af526cbfbd5afa50b9a501acb0fb9ce"},{"last_affected":"6c6ace9d23f90845fd424e474d38fe30f070775e"},{"introduced":"6eef81ee1c82f934e14d47047d8b6103b8755321"},{"fixed":"08de243eaa007597c2bfbc97d3d14e2f821ac4be"},{"introduced":"49dc9aa409d727824f26b246054a22b5a7dd5980"},{"last_affected":"49dc9aa409d727824f26b246054a22b5a7dd5980"}],"database_specific":{"extracted_events":[{"introduced":"5.7.0"},{"last_affected":"5.7.1"},{"introduced":"5.9.0"},{"last_affected":"5.9.7"},{"introduced":"5.10.0"},{"last_affected":"5.10.1"},{"introduced":"5.11.0"},{"fixed":"5.11.3"},{"introduced":"5.8.0"},{"last_affected":"5.8.0"}],"source":["CPE_RANGE","CPE_STRING"],"cpe":["cpe:2.3:a:qt:qt:*:*:*:*:*:*:*:*","cpe:2.3:a:qt:qt:5.8.0:*:*:*:*:*:*:*"]}}],"versions":["5.8.0","v5.8.0"],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2018-19865.json"}}],"schema_version":"1.7.5","severity":[{"type":"CVSS_V3","score":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N"}]}