EUVD-2026-36108
Race Condition (CWE-362)
GHSA-hx3f-67qp-m43r
7.5
CVSS 3.1 · Vendor: vendor:alpine
Share
Severity by source
Vendor (vendor:alpine)
PRIMARY
7.5
HIGH
AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
Primary rating from Vendor (vendor:alpine) · only source for this CVE.
CVSS VectorVendor: vendor:alpine
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
Attack Vector
Network
Attack Complexity
High
Privileges Required
None
User Interaction
Required
Scope
Unchanged
Confidentiality
High
Integrity
High
Availability
High
Lifecycle Timeline
2
Patch available
Jun 10, 2026 - 21:16 EUVD
Analysis Generated
May 27, 2026 - 22:34 vuln.today
DescriptionCVE.org
Alpine Linux: qt6-qtwebengine fixed in 6.10.1-r7
AnalysisAI
Qt6 WebEngine (qt6-qtwebengine) on Alpine Linux has been patched in package version 6.10.1-r7, addressing an unspecified vulnerability. The nature, severity, and exploitability of the underlying flaw are not disclosed in available intelligence - no CVE description, CVSS score, CWE classification, or vendor advisory narrative has been published at time of analysis. …
Unlock full vulnerability intelligence
- Risk assessment & exploitation conditions
- Attack chain visualization
- Remediation with exact patch versions
- Threat intelligence from 22 sources
- Personal watchlist & email alerts
Free forever · No credit card required
Attack ChainAIDerived
Hypothetical attack flow derived from CVE metadata
Access
Unknown attack vector
Exploit
Trigger unspecified flaw in qt6-qtwebengine
Impact
Achieve unspecified impact
Access
Unknown attack vector
Exploit
Trigger unspecified flaw in qt6-qtwebengine
Impact
Achieve unspecified impact
Vulnerability AssessmentAI
| Exploitation | Exploitation conditions cannot be determined from available data - no CVSS vector, no description of required configuration, and no CWE are present. … Additional conditions and limiting factors are described in the full assessment. |
| Risk Assessment | Risk cannot be meaningfully quantified from available data. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in. |
| Exploit Scenario | Because no CVE description, CVSS vector, or vulnerability class has been disclosed, a specific exploit scenario cannot be constructed from available data. Generically, qt6-qtwebengine vulnerabilities are often triggered by a user opening or an application rendering malicious web content - a crafted HTML page, JavaScript payload, or media file. … |
| Remediation | Update the Alpine Linux qt6-qtwebengine package to version 6.10.1-r7 or later using the standard Alpine package manager: 'apk upgrade qt6-qtwebengine'. … Detailed patch versions, workarounds, and compensating controls in full report. |
Threat intelligence, references, and detailed analysis are available after sign-in.
Same weakness CWE-362 – Race Condition
View allSame technique Information Disclosure
View allShare
External POC / Exploit Code
Leaving vuln.today
Destination URL
POC code from unknown sources may be malicious, contain backdoors, or be fake.
Always review and test exploit code in a safe, isolated environment (VM/sandbox).
Verify the source reputation and cross-reference with known databases (Exploit-DB, GitHub Security).