Is CVE-2025-14575 actively exploited?

No active exploitation of CVE-2025-14575 has been confirmed so far. Continue monitoring, as exploit status can change.

Can CVE-2025-14575 be exploited remotely?

No. CVE-2025-14575 requires local access to exploit.

What is the CVSS score of CVE-2025-14575?

CVE-2025-14575 has a CVSS score of 1.8 (LOW).

HOME VULNERABILITIESCVE-2025-14575

LOW

CVE-2025-14575

CWE-427Published: May 19, 2026· Updated: May 19, 2026

1.8

CVSS v3.1

EPSS:0.01%probability of exploitation in 30 daysPercentile:0.7th

Official Description

An Uncontrolled Search Path Element vulnerability in the OpenSSL TLS backend of Qt Network (qtbase) in Qt Qt Framework (Unix) allows a local attacker to load a rogue CA certificate as a trusted system authority via a crafted certificate file placed in the application's working directory.

NVD Source

Technical Analysis

CVE-2025-14575 requires local access, meaning attackers must already have a foothold on the target system.

Exploitation requires high privileges, which limits the exposure to scenarios where an attacker has already gained initial access.

CVSS v3.1 Vector Breakdown

Exploitability

Attack VectorLocal

Attack ComplexityHigh

Privileges Req.High

User InteractionNone

ScopeX

Impact

Confidentiality

Integrity

Availability

CVSS:4.0/AV:L/AC:H/AT:P/PR:H/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X