CVE-2020-0570

Uncontrolled search path in the QT Library before 5.14.0, 5.12.7 and 5.9.10 may allow an authenticated user to potentially enable…

High7.3EPSS 0.57%

Published: 14 Sept 2020
Updated: 8 Oct 2026
Reserved: 28 Oct 2019
Assigned by: intel

Description

Uncontrolled search path in the QT Library before 5.14.0, 5.12.7 and 5.9.10 may allow an authenticated user to potentially enable elevation of privilege via local access.

Timeline

2019
28 Oct 2019
28 Oct 2019
ID reserved
By intel
2020
14 Sept 202011 months later
14 Sept 2020· 11 months later
Published
2026
8 Oct 20266 years later
8 Oct 2026· 6 years later
Record updated

Changes after publication (a new score, a public exploit, EPSS crossing 1, 10 or 50 %, leaving KEV) are kept since November 2026; earlier ones are not known.

Scores

CVSS scores of CVE-2020-0570, by who scored it
Scored by	CVSS	Score	Vector
NVDNVD · Modified	3.1	High7.3	CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H

EPSS (exploitation in 30 days): 0.57% · top 53% of all CVEs (7 Nov 2026)
CISA SSVC: Exploitation: none · Automatable: no · Technical impact: total

The list uses the assigner's score when there is one, then CISA's, then NVD's: High 7.3.

Weakness

Escalation of Privilege
CWE-426 (opens in a new tab)All about CWE-426 and its CVEs

Affected products

QT Library
- affected Fixed in qt 5.14.0, qt 5.12.7, qt 5.9.10

References (3)

https://bugzilla.redhat.com/show_bug.cgi?id=1800604 (opens in a new tab)x_refsource_MISCx_transferred
https://bugreports.qt.io/browse/QTBUG-81272 (opens in a new tab)x_refsource_CONFIRMx_transferred
https://lists.qt-project.org/pipermail/development/2020-January/038534.html (opens in a new tab)x_refsource_CONFIRMx_transferred

Sources

The same CVE in the primary databases and aggregators, to check against.

Badge for a README or a ticket

[![CVE-2020-0570](https://trackcve.app/badge/CVE-2020-0570.svg)](https://trackcve.app/cve/CVE-2020-0570)

Record last updated 8 Oct 2026, 21:03 UTC.