PT-2026-107095

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 155.0.8059.39 Description A use after free issue exists in the Media component. This occurs when a program continues to use a pointer after it has been freed, which can lead to memory corruption. A remote attack...

PT-2026-107055

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 155.0.8059.39 Description A use after free issue exists in the Media component. This occurs when a program continues to use a pointer after it has been freed, which can lead to memory corruption. A remote attack...

PT-2026-106859

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 155.0.8059.39 Description An uninitialized resource in the Media component allows a remote attacker to obtain cross-origin data, which is data from a different origin than the one serving the page, by using a...

PT-2026-106397

Name of the Vulnerable Software and Affected Versions WP Media folder versions prior to 6.2.3 Description An unauthenticated Cross Site Scripting XSS issue exists, which allows an attacker to execute malicious scripts in the browser of a user by exploiting the way the software handles requests...

PT-2026-106340

Name of the Vulnerable Software and Affected Versions File Media Renamer versions prior to 1.4 Description The File Media Renamer WordPress plugin fails to verify if the requesting user is authorized to modify a specific media attachment. This allows any user with file-upload privileges to rename...

CVE-2026-59788

The email media type OAuth form passes the Authorization endpoint valu...

OPENSUSE-SU-2026:12064-1 ffmpeg-4-4.4.8-6.1 on GA media

These are all security issues fixed in the ffmpeg-4-4.4.8-6.1 package on the GA media of openSUSE Tumbleweed...

CVE-2026-106190: Use After Free

Use after free in Media in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: High...

OPENSUSE-SU-2026:12066-1 perl-Net-Whois-Raw-2.99044-1.1 on GA media

These are all security issues fixed in the perl-Net-Whois-Raw-2.99044-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:12063-1 chromedriver-154.0.8037.97-1.1 on GA media

These are all security issues fixed in the chromedriver-154.0.8037.97-1.1 package on the GA media of openSUSE Tumbleweed...

CVE-2026-106398: Incorrect Authorization

Incorrect authorization in Media in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to leak cross-origin data via a crafted HTML page. Chromium security severity: Medium...

OPENSUSE-SU-2026:12068-1 podman-6.1.2-1.1 on GA media

These are all security issues fixed in the podman-6.1.2-1.1 package on the GA media of openSUSE Tumbleweed...

jupyter-jupyterlab-4.5.11-1.1 on GA media (moderate)

jupyter-jupyterlab-4.5.11-1.1 on GA media Announcement ID: openSUSE-SU-2026:11945-1 Rating: moderate Cross-References: CVE-2026-102830 CVE-2026-102831 CVE-2026-102904 Affected Products: openSUSE Tumbleweed An update that solves 3 vulnerabilities can now be installed. Description: These are all...

valkey-9.1.2-3.1 on GA media (moderate)

valkey-9.1.2-3.1 on GA media Announcement ID: openSUSE-SU-2026:11951-1 Rating: moderate Cross-References: CVE-2026-92925 CVSS scores: CVE-2026-92925 SUSE : 7.1 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H CVE-2026-92925 SUSE : 7.1 CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N...

python313-azure-storage-queue-12.18.0-1.1 on GA media (moderate)

python313-azure-storage-queue-12.18.0-1.1 on GA media Announcement ID: openSUSE-SU-2026:11944-1 Rating: moderate Cross-References: CVE-2022-30187 CVSS scores: CVE-2022-30187 SUSE : 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N Affected Products: openSUSE Tumbleweed An update that solves one...

python313-sglang-0.5.20-2.1 on GA media (moderate)

python313-sglang-0.5.20-2.1 on GA media Announcement ID: openSUSE-SU-2026:11947-1 Rating: moderate Cross-References: CVE-2026-102634 CVSS scores: CVE-2026-102634 SUSE : 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H Affected Products: openSUSE Tumbleweed An update that solves one vulnerability...

python313-Werkzeug-3.1.9-1.1 on GA media (moderate)

python313-Werkzeug-3.1.9-1.1 on GA media Announcement ID: openSUSE-SU-2026:11943-1 Rating: moderate Cross-References: CVE-2019-14806 CVE-2023-25577 CVE-2023-46136 CVE-2024-34069 CVE-2024-49767 CVE-2026-102598 CVSS scores: CVE-2019-14806 SUSE : 6.2 CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N...

python313-langchain-anthropic-1.7.5-1.1 on GA media (moderate)

python313-langchain-anthropic-1.7.5-1.1 on GA media Announcement ID: openSUSE-SU-2026:11946-1 Rating: moderate Cross-References: CVE-2026-55443 Affected Products: openSUSE Tumbleweed An update that solves one vulnerability can now be installed. Description: These are all security issues fixed in...

OPENSUSE-SU-2026:12065-1 perl-Net-OAuth-0.330.0-2.1 on GA media

These are all security issues fixed in the perl-Net-OAuth-0.330.0-2.1 package on the GA media of openSUSE Tumbleweed...

PT-2026-107308

Name of the Vulnerable Software and Affected Versions Gitea affected versions not specified Description The API endpoint GET /api/v1/repos/owner/repo/media/filepath fails to include the proper content type and disposition headers when serving files up to 1 KiB stored directly in Git rather than i...