CVE catalog

CVE-2018-19865

qtvirtualkeyboard-opensource-src: CVE-2018-19865

Severity: High · CVSS 7.5CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Published: Dec 5, 2018, 11:29:06 AM UTC
Source: [NVD] · [CVE record]
EPSS: 2.17% · Oct 27, 2026

A keystroke logging issue was discovered in Virtual Keyboard in Qt 5.7.x, 5.8.x, 5.9.x, 5.10.x, and 5.11.x before 5.11.3.

Vulnerable and fixed packages

Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.

Distribution	Package	Release	Version	Status
Debian	qtvirtualkeyboard-opensource-src	sid	`5.15.19+dfsg-2`	fixed
Debian	qtvirtualkeyboard-opensource-src	forky	`5.15.19+dfsg-2`	fixed
Debian	qtvirtualkeyboard-opensource-src	trixie	`5.15.15+dfsg-2`	fixed
Debian	qtvirtualkeyboard-opensource-src	bookworm	`5.15.8+dfsg-2`	fixed
Opensuse	libqt5-qtvirtualkeyboard	leap 15.0	`5.9.4-lp150.2.3.1`	fixed
Suse	libqt5-qtvirtualkeyboard	package hub 15	`5.9.4-bp150.3.3.1`	fixed

Fixed-version evidence

Distribution	Package	Type	Release	Fixed version	Urgency	Origin	Bugs
Debian	qtvirtualkeyboard-opensource-src	source	sid	`5.11.3+dfsg-2`	not yet assigned	Not reported	Not reported
Debian	qtvirtualkeyboard-opensource-src	source	forky	`5.11.3+dfsg-2`	not yet assigned	Not reported	Not reported
Debian	qtvirtualkeyboard-opensource-src	source	trixie	`5.11.3+dfsg-2`	not yet assigned	Not reported	Not reported
Debian	qtvirtualkeyboard-opensource-src	source	bookworm	`5.11.3+dfsg-2`	not yet assigned	Not reported	Not reported
Opensuse	libqt5-qtvirtualkeyboard	rpm	leap 15.0	`5.9.4-lp150.2.3.1`	Not reported	OPENSUSE-SU-2019:1259-1	Not reported
Suse	libqt5-qtvirtualkeyboard	rpm	package hub 15	`5.9.4-bp150.3.3.1`	Not reported	OPENSUSE-SU-2019:1263-1	Not reported

OpenFactory catalog packages

[Debian 12 (Bookworm)]

[libqt5hunspellinputmethod5]Fixed
Source package: [qtvirtualkeyboard-opensource-src]
Details (2)
- 5.15.8+dfsg-2 · amd64 · bookworm
  Fixed · Fixed: 5.11.3+dfsg-2
  dsa · qtvirtualkeyboard-opensource-src · debian · bookworm; dsa · qtvirtualkeyboard-opensource-src · debian · 12
- 5.15.8+dfsg-2 · arm64 · bookworm
  Fixed · Fixed: 5.11.3+dfsg-2
  dsa · qtvirtualkeyboard-opensource-src · debian · bookworm; dsa · qtvirtualkeyboard-opensource-src · debian · 12
[libqt5virtualkeyboard5]Fixed
Source package: [qtvirtualkeyboard-opensource-src]
Details (2)
- 5.15.8+dfsg-2 · amd64 · bookworm
  Fixed · Fixed: 5.11.3+dfsg-2
  dsa · qtvirtualkeyboard-opensource-src · debian · bookworm; dsa · qtvirtualkeyboard-opensource-src · debian · 12
- 5.15.8+dfsg-2 · arm64 · bookworm
  Fixed · Fixed: 5.11.3+dfsg-2
  dsa · qtvirtualkeyboard-opensource-src · debian · bookworm; dsa · qtvirtualkeyboard-opensource-src · debian · 12
[libqt5virtualkeyboard5-dev]Fixed
Source package: [qtvirtualkeyboard-opensource-src]
Details (2)
- 5.15.8+dfsg-2 · amd64 · bookworm
  Fixed · Fixed: 5.11.3+dfsg-2
  dsa · qtvirtualkeyboard-opensource-src · debian · bookworm; dsa · qtvirtualkeyboard-opensource-src · debian · 12
- 5.15.8+dfsg-2 · arm64 · bookworm
  Fixed · Fixed: 5.11.3+dfsg-2
  dsa · qtvirtualkeyboard-opensource-src · debian · bookworm; dsa · qtvirtualkeyboard-opensource-src · debian · 12
[qml-module-qtquick-virtualkeyboard]Fixed
Source package: [qtvirtualkeyboard-opensource-src]
Details (2)
- 5.15.8+dfsg-2 · amd64 · bookworm
  Fixed · Fixed: 5.11.3+dfsg-2
  dsa · qtvirtualkeyboard-opensource-src · debian · bookworm; dsa · qtvirtualkeyboard-opensource-src · debian · 12
- 5.15.8+dfsg-2 · arm64 · bookworm
  Fixed · Fixed: 5.11.3+dfsg-2
  dsa · qtvirtualkeyboard-opensource-src · debian · bookworm; dsa · qtvirtualkeyboard-opensource-src · debian · 12
[qtvirtualkeyboard5-doc]Fixed
Source package: [qtvirtualkeyboard-opensource-src]
Details (2)
- 5.15.8+dfsg-2 · all · bookworm
  Fixed · Fixed: 5.11.3+dfsg-2
  dsa · qtvirtualkeyboard-opensource-src · debian · bookworm; dsa · qtvirtualkeyboard-opensource-src · debian · 12
- 5.15.8+dfsg-2 · all · bookworm
  Fixed · Fixed: 5.11.3+dfsg-2
  dsa · qtvirtualkeyboard-opensource-src · debian · bookworm; dsa · qtvirtualkeyboard-opensource-src · debian · 12
[qtvirtualkeyboard5-doc-html]Fixed
Source package: [qtvirtualkeyboard-opensource-src]
Details (2)
- 5.15.8+dfsg-2 · all · bookworm
  Fixed · Fixed: 5.11.3+dfsg-2
  dsa · qtvirtualkeyboard-opensource-src · debian · bookworm; dsa · qtvirtualkeyboard-opensource-src · debian · 12
- 5.15.8+dfsg-2 · all · bookworm
  Fixed · Fixed: 5.11.3+dfsg-2
  dsa · qtvirtualkeyboard-opensource-src · debian · bookworm; dsa · qtvirtualkeyboard-opensource-src · debian · 12
[qtvirtualkeyboard5-examples]Fixed
Source package: [qtvirtualkeyboard-opensource-src]
Details (2)
- 5.15.8+dfsg-2 · amd64 · bookworm
  Fixed · Fixed: 5.11.3+dfsg-2
  dsa · qtvirtualkeyboard-opensource-src · debian · bookworm; dsa · qtvirtualkeyboard-opensource-src · debian · 12
- 5.15.8+dfsg-2 · arm64 · bookworm
  Fixed · Fixed: 5.11.3+dfsg-2
  dsa · qtvirtualkeyboard-opensource-src · debian · bookworm; dsa · qtvirtualkeyboard-opensource-src · debian · 12
[qtvirtualkeyboard-plugin]Fixed
Source package: [qtvirtualkeyboard-opensource-src]
Details (2)
- 5.15.8+dfsg-2 · amd64 · bookworm
  Fixed · Fixed: 5.11.3+dfsg-2
  dsa · qtvirtualkeyboard-opensource-src · debian · bookworm; dsa · qtvirtualkeyboard-opensource-src · debian · 12
- 5.15.8+dfsg-2 · arm64 · bookworm
  Fixed · Fixed: 5.11.3+dfsg-2
  dsa · qtvirtualkeyboard-opensource-src · debian · bookworm; dsa · qtvirtualkeyboard-opensource-src · debian · 12

[Debian 13 (Trixie)]

[libqt5hunspellinputmethod5]Fixed
Source package: [qtvirtualkeyboard-opensource-src]
Details (2)
- 5.15.15+dfsg-2 · amd64 · trixie
  Fixed · Fixed: 5.11.3+dfsg-2
  dsa · qtvirtualkeyboard-opensource-src · debian · 13
- 5.15.15+dfsg-2 · arm64 · trixie
  Fixed · Fixed: 5.11.3+dfsg-2
  dsa · qtvirtualkeyboard-opensource-src · debian · 13
[libqt5virtualkeyboard5]Fixed
Source package: [qtvirtualkeyboard-opensource-src]
Details (2)
- 5.15.15+dfsg-2 · amd64 · trixie
  Fixed · Fixed: 5.11.3+dfsg-2
  dsa · qtvirtualkeyboard-opensource-src · debian · 13
- 5.15.15+dfsg-2 · arm64 · trixie
  Fixed · Fixed: 5.11.3+dfsg-2
  dsa · qtvirtualkeyboard-opensource-src · debian · 13
[libqt5virtualkeyboard5-dev]Fixed
Source package: [qtvirtualkeyboard-opensource-src]
Details (2)
- 5.15.15+dfsg-2 · amd64 · trixie
  Fixed · Fixed: 5.11.3+dfsg-2
  dsa · qtvirtualkeyboard-opensource-src · debian · 13
- 5.15.15+dfsg-2 · arm64 · trixie
  Fixed · Fixed: 5.11.3+dfsg-2
  dsa · qtvirtualkeyboard-opensource-src · debian · 13
[qml-module-qtquick-virtualkeyboard]Fixed
Source package: [qtvirtualkeyboard-opensource-src]
Details (2)
- 5.15.15+dfsg-2 · amd64 · trixie
  Fixed · Fixed: 5.11.3+dfsg-2
  dsa · qtvirtualkeyboard-opensource-src · debian · 13
- 5.15.15+dfsg-2 · arm64 · trixie
  Fixed · Fixed: 5.11.3+dfsg-2
  dsa · qtvirtualkeyboard-opensource-src · debian · 13
[qtvirtualkeyboard5-doc]Fixed
Source package: [qtvirtualkeyboard-opensource-src]
Details (2)
- 5.15.15+dfsg-2 · all · trixie
  Fixed · Fixed: 5.11.3+dfsg-2
  dsa · qtvirtualkeyboard-opensource-src · debian · 13
- 5.15.15+dfsg-2 · all · trixie
  Fixed · Fixed: 5.11.3+dfsg-2
  dsa · qtvirtualkeyboard-opensource-src · debian · 13
[qtvirtualkeyboard5-doc-html]Fixed
Source package: [qtvirtualkeyboard-opensource-src]
Details (2)
- 5.15.15+dfsg-2 · all · trixie
  Fixed · Fixed: 5.11.3+dfsg-2
  dsa · qtvirtualkeyboard-opensource-src · debian · 13
- 5.15.15+dfsg-2 · all · trixie
  Fixed · Fixed: 5.11.3+dfsg-2
  dsa · qtvirtualkeyboard-opensource-src · debian · 13
[qtvirtualkeyboard5-examples]Fixed
Source package: [qtvirtualkeyboard-opensource-src]
Details (2)
- 5.15.15+dfsg-2 · amd64 · trixie
  Fixed · Fixed: 5.11.3+dfsg-2
  dsa · qtvirtualkeyboard-opensource-src · debian · 13
- 5.15.15+dfsg-2 · arm64 · trixie
  Fixed · Fixed: 5.11.3+dfsg-2
  dsa · qtvirtualkeyboard-opensource-src · debian · 13
[qtvirtualkeyboard-plugin]Fixed
Source package: [qtvirtualkeyboard-opensource-src]
Details (2)
- 5.15.15+dfsg-2 · amd64 · trixie
  Fixed · Fixed: 5.11.3+dfsg-2
  dsa · qtvirtualkeyboard-opensource-src · debian · 13
- 5.15.15+dfsg-2 · arm64 · trixie
  Fixed · Fixed: 5.11.3+dfsg-2
  dsa · qtvirtualkeyboard-opensource-src · debian · 13

Observed: Oct 23, 2026, 5:35:51 PM UTC

References

[CERT-Bund public advisories] · [Debian Security Tracker] · [FIRST EPSS] · [OSV Package Vulnerability Database] · [SUSE security advisories and VEX]