EUVD-2026-42051

A logic vulnerability was found in GStreamer's webrtcbin component. The checksdpcrypto function contains an inverted boolean condition that causes it to accept remote SDP offers or answers that lack the required a=fingerprint attribute, while incorrectly rejecting those that include it. An attack...

PYSEC-2026-1116 Ankitects Anki arbitrary script execution vulnerability

An arbitrary script execution vulnerability exists in the MPV functionality of Ankitects Anki 24.04. A specially crafted flashcard can lead to a arbitrary code execution. An attacker can send malicious flashcard to trigger this vulnerability...

CVE-2025-64636

creationtimestamp| type| source ---|---|--- 2026-07-07 14:16:07+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mq2s64b4pj24...

CVE-2026-11340

creationtimestamp| type| source ---|---|--- 2026-07-07 11:56:23+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mq2keavs5r2n...

CVE-2026-11328

creationtimestamp| type| source ---|---|--- 2026-07-07 04:51:15+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpzsm2qgcy2y 2026-07-07 13:16:05+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mq2osqsegt2p 2026-07-07 13:22:18+00:00| seen|...

SUSE CVE-2026-13920

Insufficient validation of untrusted input in Media in Google Chrome on Windows prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: Medium...

SUSE CVE-2026-13970

Uninitialized Use in Media in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to obtain potentially sensitive information from process memory via a crafted HTML page. Chromium security severity: Medium...

SUSE CVE-2026-13986

Inappropriate implementation in Media UI in Google Chrome on ChromeOS prior to 150.0.7871.47 allowed a remote attacker who convinced a user to engage in specific UI gestures to perform UI spoofing via a crafted HTML page. Chromium security severity: Medium...

SUSE CVE-2026-14033

Insufficient policy enforcement in Media in Google Chrome on Windows prior to 150.0.7871.47 allowed a remote attacker to bypass site isolation via a crafted HTML page. Chromium security severity: Low...

SUSE CVE-2026-14043

Use after free in GetUserMedia in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: Low...

SUSE CVE-2026-14056

Insufficient validation of untrusted input in Media in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted video file. Chromium security severity: Low...

PT-2026-56220

Name of the Vulnerable Software and Affected Versions Joomla! Core affected versions not specified Description An improper access check in the com media webservice endpoints allows privileged users to overwrite media files even if they lack the necessary editing permissions. Recommendations At th...

OPENSUSE-SU-2026:11201-1 pam-1.7.2+git12-2.1 on GA media

These are all security issues fixed in the pam-1.7.2+git12-2.1 package on the GA media of openSUSE Tumbleweed...

The vulnerability of the dvb_create_media_entity() function in the drivers/media/dvb-core/dvbdev.c file of the Linux operating system’s multimedia device driver module allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the dvbcreatemediaentity function in the drivers/media/dvb-core/dvbdev.c file of the Linux kernel’s multimedia device driver is related to improper initialization of resources. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity,...

Linux Distros Unpatched Vulnerability : CVE-2026-14790

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw has been found in GPAC 26.02.0. This affects the function nhmldumpsendframe of the file src/filters/writenhml.c of the component Media File Handler...

OPENSUSE-SU-2026:11209-1 tomcat10-10.1.56-1.1 on GA media

These are all security issues fixed in the tomcat10-10.1.56-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:11203-1 python313-httplib2-0.32.0-1.1 on GA media

These are all security issues fixed in the python313-httplib2-0.32.0-1.1 package on the GA media of openSUSE Tumbleweed...

python313-openapi-spec-validator-0.9.0-1.1 on GA media (moderate)

python313-openapi-spec-validator-0.9.0-1.1 on GA media Announcement ID: openSUSE-SU-2026:11192-1 Rating: moderate Cross-References: CVE-2017-18342 CVSS scores: CVE-2017-18342 SUSE : 7.4 CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H Affected Products: openSUSE Tumbleweed An update that solves one...

librpmbuild10-4.20.1-8.1 on GA media (moderate)

librpmbuild10-4.20.1-8.1 on GA media Announcement ID: openSUSE-SU-2026:11193-1 Rating: moderate Cross-References: CVE-2026-44604 CVE-2026-44605 CVSS scores: CVE-2026-44604 SUSE : 7 CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H CVE-2026-44604 SUSE : 7.3...

PT-2026-56146

Name of the Vulnerable Software and Affected Versions WP Travel Engine versions prior to 6.8.1 Description Authenticated users with subscriber-level access and above can relocate arbitrary files within the WordPress uploads directory into their own profile-image path. This occurs because the plug...