Denial-of-service vulnerability in the SVG parser and renderer impacts Qt

These records connect through source-stated identifiers. Shared identifiers or dates alone do not establish shared exposure, root cause or applicability.

CVE-2026-8168 · Microsoft / collected KEV context

cve-program · CVE-2026-8168

• https://wiki.qt.io/List_of_known_vulnerabilities_in_Qt_products#CVE-2026-8168:
• https://codereview.qt-project.org/c/qt/qtsvg/+/730591
• https://codereview.qt-project.org/c/qt/qtsvg/+/730501
• https://codereview.qt-project.org/c/qt/qtsvg/+/731257
• https://codereview.qt-project.org/c/qt/qtsvg/+/730892
• https://codereview.qt-project.org/c/qt/qtsvg/+/733245
• https://codereview.qt-project.org/c/qt/qtsvg/+/738811
• https://codereview.qt-project.org/c/qt/qtsvg/+/730590
• https://codereview.qt-project.org/c/qt/qtsvg/+/743488
• https://codereview.qt-project.org/c/qt/qtsvg/+/748966
• https://codereview.qt-project.org/c/qt/qtsvg/+/756512

No related operational record is retained in the current change model.