PT-2026-89006

PocketMine-MP versions before 5.39.2 fail to validate entity despawn state when processing attack packets from clients. Attackers can exploit a race condition by attacking a disconnecting player to trigger multiple death handlers, causing inventory items and experience to drop multiple times for...

PT-2026-88993

Name of the Vulnerable Software and Affected Versions VLC media player versions 3.0.0 through 3.0.23 Description A memory-safety issue exists when processing crafted media, caused by an integer overflow. An integer overflow occurs when an arithmetic operation attempts to create a numeric value th...

CVE-2026-86204: Uncontrolled Resource Consumption

PocketMine-MP versions before 5.39.2 fail to limit JSON payload size in ModalFormResponsePacket handling, allowing authenticated players to cause denial of service. Attackers can send modal form response packets with massive JSON arrays to exhaust server memory and CPU resources, rendering the...

CVE-2026-73324: Out-of-bounds Read

Certain VLC media player builds in versions 3.0.0 through 3.0.23 contain a memory-safety vulnerability reachable when processing media from an attacker-controlled network source. Exploitation requires user interaction and may disclose a limited, layout-dependent amount of VLC process memory...

CVE-2026-72960

Heap-based buffer overflow in Windows Media Player allows an unauthorized attacker to execute code over a network...

CVE-2026-70203

Heap-based buffer overflow in Windows Media Player allows an unauthorized attacker to execute code over a network...

EUVD-2026-73726

Heap-based buffer overflow in Windows Media Player allows an unauthorized attacker to execute code over a network...

CVE-2026-70203

CVE-2026-70203 is a heap-based buffer overflow in Windows Media Player that allows an unauthorized attacker to execute code over a network . The vulnerability is classified as Remote Code Execution with a CVSS 3.1 score of 8.8 (HIGH) , reflecting a network attack vector, low complexity, no requir...

CVE-2026-72960

Windows Media Player is affected by a heap-based buffer overflow that allows an unauthorized, remote attacker to achieve code execution over a network . The attack requires user interaction (e.g., opening a crafted media file), but no prior privileges or elevated complexity. The assigned CVSS 3.1...

EUVD-2026-73675

Heap-based buffer overflow in Windows Media Player allows an unauthorized attacker to execute code over a network...

Windows Media Player Remote Code Execution Vulnerability

Heap-based buffer overflow in Windows Media Player allows an unauthorized attacker to execute code over a network...

Windows Media Player Remote Code Execution Vulnerability

Heap-based buffer overflow in Windows Media Player allows an unauthorized attacker to execute code over a network...

CVE-2026-72960: Heap-based Buffer Overflow

Heap-based buffer overflow in Windows Media Player allows an unauthorized attacker to execute code over a network...

PT-2026-87792

Name of the Vulnerable Software and Affected Versions Windows Media Player affected versions not specified Description A heap-based buffer overflow occurs in Windows Media Player, which is a memory corruption issue where data exceeds the allocated buffer on the heap. This flaw allows an...

PT-2026-87875

Heap-based buffer overflow in Windows Media Player allows an unauthorized attacker to execute code over a network...

CVE-2026-70203: Heap-based Buffer Overflow

Heap-based buffer overflow in Windows Media Player allows an unauthorized attacker to execute code over a network...

Allocation of Resources Without Limits or Throttling

Overview pocketmine/pocketmine-mp is a highly customisable, open source server software for Minecraft: Bedrock Edition written in PHP Affected versions of this package are vulnerable to Allocation of Resources Without Limits or Throttling via the unauthenticated session handling process. An...

CVE-2022-51008

PocketMine-MP before 4.12.3 fails to limit unauthenticated sessions, allowing attackers to exhaust player slots by creating sessions without sending LoginPacket. Attackers can flood the server with unauthenticated connections that occupy max-player slots, preventing legitimate players from joinin...

CVE-2022-51008 PocketMine-MP before 4.12.3 Denial of Service via Unauthenticated Sessions

PocketMine-MP before 4.12.3 fails to limit unauthenticated sessions, allowing attackers to exhaust player slots by creating sessions without sending LoginPacket. Attackers can flood the server with unauthenticated connections that occupy max-player slots, preventing legitimate players from joinin...

CVE-2022-51008 PocketMine-MP before 4.12.3 Denial of Service via Unauthenticated Sessions

PocketMine-MP before 4.12.3 fails to limit unauthenticated sessions, allowing attackers to exhaust player slots by creating sessions without sending LoginPacket. Attackers can flood the server with unauthenticated connections that occupy max-player slots, preventing legitimate players from joinin...