← Vulnerability feed

Vulnerability record · CVE-2025-6338 · published 16 October 2025

CVE-2025-6338: There is an incomplete cleanup vulnerability in Qt Network's Schannel support on Windows which can lead to a D…

There is an incomplete cleanup vulnerability in Qt Network's Schannel support on Windows which can lead to a Denial of Service over a long period. This issue affects Qt from 5.15.0 through 6.8.3, from 6.9.0 before 6.9.2.

9.2 CVSS 4.0 Critical EPSS 0.43% · top 65.6% CWE-459 · CWE-459 Deferred
9.2CVSS 4.0 base score
0.43%EPSS exploitation probability, 30 days
NoNot in CISA KEV
0Affected product versions listed by NVD
1References
29 Jul 2026Last modified by NVD

Description

There is an incomplete cleanup vulnerability in Qt Network's Schannel support on Windows which can lead to a Denial of Service over a long period. This issue affects Qt from 5.15.0 through 6.8.3, from 6.9.0 before 6.9.2.

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:

References

LinkTags
https://codereview.qt-project.org/c/qt/qtbase/+/651495

Track CVE-2025-6338 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Source: NIST National Vulnerability Database (record CVE-2025-6338), CISA KEV, FIRST EPSS (scores of 2026-09-27). This page is refreshed as NVD updates the record.