CVE-2026-65422

A flaw in the authorization mechanism for Media Gateway API in Genetec Security Center may allow a user with no playback privileges to generate video thumbnails...

CVE-2026-65422

A flaw in the authorization mechanism for the Media Gateway API in Genetec Security Center may allow a user lacking playback privileges to generate video thumbnails . The vulnerability impacts confidentiality as indicated by the CVSS score. Remediation is available in Security Center version 5.14...

CVE-2026-65422

A flaw in the authorization mechanism for Media Gateway API in Genetec Security Center may allow a user with no playback privileges to generate video thumbnails...

Astra Linux – Vulnerability in Chromium

Improper input validation in the Media component of Google Chrome prior to version 152.0.7977.65 allowed a remote attacker to potentially execute arbitrary code outside the sandbox through a crafted HTML page. Chromium security severity: High...

Astra Linux – Vulnerability in Chromium

Before version 152.0.7977.65, reading out of bounds in Skia using Google Chrome allowed a remote attacker to potentially read memory within the sandbox through a crafted media file. Chromium security severity: Medium...

Astra Linux – Vulnerability in Chromium

Before version 153.0.8010.36, writing media content in Google Chrome allowed a remote attacker to potentially execute arbitrary code outside the sandbox through a crafted HTML page. Chromium security severity: Medium...

PT-2026-98133

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the chips-media: wave5 component where the handle dynamic resolution change function is called within initialize sequence without properly acquiring the state lock,...

CVE-2026-65422: Missing Authorization

A flaw in the authorization mechanism for Media Gateway API in Genetec Security Center may allow a user with no playback privileges to generate video thumbnails...

CVE-2026-97233: Improper Neutralization of Input During Web Page Generation

A vulnerability was identified in volotat Anagnorisis up to 0.4.11. Affected by this issue is the function html of the file PlaylistManager.js of the component Media Filename Handler. Such manipulation of the argument filepath leads to cross site scripting. The attack can be launched remotely. Th...

Linux Distros Unpatched Vulnerability : CVE-2026-93828

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - exfat: fix handling of damaged volume in exfatcreateupcasetable When the size of the upcase table is set to zero in the dentry for any reasone.g. corrupted medi...

CVE-2026-97513

In the Linux kernel, the following vulnerability has been resolved: media: chips-media: wave5: Release m2mctx after Instance Removed from List Possible use after free if IRQ thread manages to obtain spinlock between m2mctx release and wave5release function removing stream instance from list of...

PT-2026-98126

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the dm1105 media driver where the return value of the dm1105 dma map function, which manages DMA memory allocation, is ignored within the dm1105 hw init function. If t...

CVE-2026-97514: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: media: chips-media: wave5: Fix Reports from Kernel Lock Validator handledynamicresolution change requires that the statelock be acquired based on the lockdepassertheld. However, the handledynamicresolutionchange call in...

CVE-2026-93236: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: media: meson: vdec: fix NULL pointer deref in vdectryfmtcommon When VIDIOCTRYFMT is called with an unsupported pixel format on the OUTPUT queue, vdectryfmtcommon falls back to V4L2PIXFMTMPEG2. However, if a distro has locally...

PT-2026-97833

Name of the Vulnerable Software and Affected Versions Genetec Security Center affected versions not specified Description A flaw in the authorization mechanism for the Media Gateway API allows a user without playback privileges to generate video thumbnails. Recommendations At the moment, there is...

OPENSUSE-SU-2026:11871-1 cosign-3.1.3-1.1 on GA media

These are all security issues fixed in the cosign-3.1.3-1.1 package on the GA media of openSUSE Tumbleweed...

Linux Distros Unpatched Vulnerability : CVE-2026-97514

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - media: chips-media: wave5: Fix Reports from Kernel Lock Validator handledynamicresolution change requires that the statelock be acquired based on the...

OPENSUSE-SU-2026:11880-1 kernel-devel-7.2.7-1.1 on GA media

These are all security issues fixed in the kernel-devel-7.2.7-1.1 package on the GA media of openSUSE Tumbleweed...

CVE-2026-97513: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: media: chips-media: wave5: Release m2mctx after Instance Removed from List Possible use after free if IRQ thread manages to obtain spinlock between m2mctx release and wave5release function removing stream instance from list of...

CVE-2026-97514

In the Linux kernel, the following vulnerability has been resolved: media: chips-media: wave5: Fix Reports from Kernel Lock Validator handledynamicresolution change requires that the statelock be acquired based on the lockdepassertheld. However, the handledynamicresolutionchange call in...