Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:31839
HistoryAug 27, 2021 - 10:47 a.m.

Remote Code Execution (RCE)

2021-08-2710:47:48
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
29
remote code execution
qt5
vulnerability
sanitization
attacker
arbitrary code
sandbox
html page

EPSS

0.01

Percentile

83.6%

qt5-qtwebengine is vulnerable to remote code execution. The vulnerability exists due to a lack of sanitization which allows an attacker to execute arbitrary code inside a sandbox via a crafted HTML page.