netty-4.1.138-1.1 on GA media (moderate)

netty-4.1.138-1.1 on GA media Announcement ID: openSUSE-SU-2026:11882-1 Rating: moderate Cross-References: CVE-2026-59902 CVE-2026-59903 CVE-2026-62243 CVE-2026-62380 CVE-2026-75595 CVE-2026-75596 CVE-2026-76816 CVE-2026-89044 CVE-2026-93488 CVE-2026-93491 CVE-2026-93492 CVE-2026-93493...

chromedriver-154.0.8037.57-1.1 on GA media (moderate)

chromedriver-154.0.8037.57-1.1 on GA media Announcement ID: openSUSE-SU-2026:11888-1 Rating: moderate Cross-References: CVE-2026-95274 CVE-2026-95275 CVE-2026-95276 CVE-2026-95277 CVE-2026-95278 CVE-2026-95279 CVE-2026-95280 CVE-2026-95281 CVE-2026-95282 CVE-2026-95283 CVE-2026-95284 CVE-2026-952...

libpoppler-cpp3-26.09.0-2.1 on GA media (moderate)

libpoppler-cpp3-26.09.0-2.1 on GA media Announcement ID: openSUSE-SU-2026:11885-1 Rating: moderate Cross-References: CVE-2026-93313 CVE-2026-93314 CVSS scores: CVE-2026-93313 SUSE : 3.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L CVE-2026-93314 SUSE : 3.3...

pi-coding-agent-0.87.1-1.1 on GA media (moderate)

pi-coding-agent-0.87.1-1.1 on GA media Announcement ID: openSUSE-SU-2026:11884-1 Rating: moderate Cross-References: CVE-2026-84933 CVE-2026-84947 CVE-2026-84961 CVSS scores: CVE-2026-84933 SUSE : 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:L/A:N CVE-2026-84933 SUSE : 8.3...

pcapplusplus-devel-26.07-1.1 on GA media (moderate)

pcapplusplus-devel-26.07-1.1 on GA media Announcement ID: openSUSE-SU-2026:11883-1 Rating: moderate Cross-References: CVE-2026-13587 CVE-2026-13588 CVE-2026-13589 CVE-2026-13590 Affected Products: openSUSE Tumbleweed An update that solves 4 vulnerabilities can now be installed. Description: These...

SUSE CVE-2026-97514

In the Linux kernel, the following vulnerability has been resolved: media: chips-media: wave5: Fix Reports from Kernel Lock Validator handledynamicresolution change requires that the statelock be acquired based on the lockdepassertheld. However, the handledynamicresolutionchange call in...

SUSE CVE-2026-97581

In the Linux kernel, the following vulnerability has been resolved: media: verisilicon: hantro: bound G2 HEVC tile loop to the buffer capacity preparetileinfobuffer writes one entry per tile into the tilesizes DMA buffer, sized for a grid equal to the PPS uAPI array capacity. Use the bounded...

CVE-2026-71974

U-Boot before 2026.10-rc3 contains an out-of-bounds write vulnerability in readslottedpartition that fails to validate image size against partition bounds. Attackers with physical access can supply crafted boot media with oversized headers to write past the load buffer into bootloader memory on...

CVE-2026-102315

An uninitialized resource flaw was found in the Media component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=563351482 https://code.google.com/p/chromium/issues/detail?id=102315...

WordPress Viable URL Media Uploader plugin <= 1.0.0 - Authenticated (Author+) Stored Cross-Site Scripting vulnerability

Authenticated Author+ Stored Cross-Site Scripting vulnerability discovered by Peerapat Samatathanyakorn in WordPress Plugin Viable URL Media Uploader versions = 1.0.1...

CVE-2026-102875

VLC media player before 3.0.24 contains a path traversal vulnerability in the skins2 ThemeLoader that fails to validate member names in .vlt skin archives. Attackers can craft malicious skin files with path traversal sequences to write arbitrary files with VLC user privileges, enabling code...

DEBIAN-CVE-2026-102875

VLC media player before 3.0.24 contains a path traversal vulnerability in the skins2 ThemeLoader that fails to validate member names in .vlt skin archives. Attackers can craft malicious skin files with path traversal sequences to write arbitrary files with VLC user privileges, enabling code...

CVE-2026-102315

Uninitialized resource in Media in Google Chrome on on Windows prior to 154.0.8037.92 allowed a remote attacker who had compromised the renderer process to read memory outside the sandbox via a crafted HTML page. Chromium security severity: High...

DEBIAN-CVE-2026-102315

Uninitialized resource in Media in Google Chrome on on Windows prior to 154.0.8037.92 allowed a remote attacker who had compromised the renderer process to read memory outside the sandbox via a crafted HTML page. Chromium security severity: High...

CVE-2026-102875

VLC media player before 3.0.24 contains a path traversal vulnerability in the skins2 ThemeLoader that fails to validate member names in .vlt skin archives. Attackers can craft malicious skin files with path traversal sequences to write arbitrary files with VLC user privileges, enabling code...

UBUNTU-CVE-2026-102875

VLC media player before 3.0.24 contains a path traversal vulnerability in the skins2 ThemeLoader that fails to validate member names in .vlt skin archives. Attackers can craft malicious skin files with path traversal sequences to write arbitrary files with VLC user privileges, enabling code...

CVE-2026-102875 VLC media player before 3.0.24 Path Traversal via skins2

VLC media player before 3.0.24 contains a path traversal vulnerability in the skins2 ThemeLoader that fails to validate member names in .vlt skin archives. Attackers can craft malicious skin files with path traversal sequences to write arbitrary files with VLC user privileges, enabling code...

EUVD-2026-89410

VLC media player before 3.0.24 contains a path traversal vulnerability in the skins2 ThemeLoader that fails to validate member names in .vlt skin archives. Attackers can craft malicious skin files with path traversal sequences to write arbitrary files with VLC user privileges, enabling code...

CVE-2026-102875 VLC media player before 3.0.24 Path Traversal via skins2

VLC media player before 3.0.24 contains a path traversal vulnerability in the skins2 ThemeLoader that fails to validate member names in .vlt skin archives. Attackers can craft malicious skin files with path traversal sequences to write arbitrary files with VLC user privileges, enabling code...

CVE-2026-102875

VLC media player before version 3.0.24 is vulnerable to a path traversal vulnerability within the skins2 ThemeLoader . The root cause is a failure to validate member names in .vlt skin archives , which allows an attacker to craft malicious skin files containing path traversal sequences. This can ...