firefox: thunderbird: Same-origin policy bypass in the Audio/Video: Playback component

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Same-origin policy bypass in the Audio/Video: Playback component...

[SECURITY] Fedora 44 Update: baresip-4.11.0-1.fc44

A modular SIP user-agent with support for audio and video, and many IETF standards such as SIP, SDP, RTP/RTCP and STUN/TURN/ICE for both, IPv4 and IPv6. Additional modules provide support for audio codecs like Codec2, G.711, G.722, GSM, L16 and Opus, audio drivers like ALSA, GStreamer, JACK Audio...

[SECURITY] Fedora 43 Update: baresip-4.11.0-1.fc43

A modular SIP user-agent with support for audio and video, and many IETF standards such as SIP, SDP, RTP/RTCP and STUN/TURN/ICE for both, IPv4 and IPv6. Additional modules provide support for audio codecs like Codec2, G.711, G.722, GSM, L16 and Opus, audio drivers like ALSA, GStreamer, JACK Audio...

CVE-2026-72962: Heap-based Buffer Overflow

Heap-based buffer overflow in Windows USB Video Driver allows an authorized attacker to elevate privileges locally...

CVE-2026-69423: Heap-based Buffer Overflow

Heap-based buffer overflow in Windows USB Video Driver allows an authorized attacker to elevate privileges over a network...

CVE-2026-69422: Use After Free

Use after free in Windows USB Video Driver allows an authorized attacker to elevate privileges locally...

PT-2026-87454

Heap-based buffer overflow in Windows USB Video Driver allows an authorized attacker to elevate privileges over a network...

PT-2026-87453

Use after free in Windows USB Video Driver allows an authorized attacker to elevate privileges locally...

CVE-2026-69584: Integer Overflow or Wraparound

Integer overflow or wraparound in Windows USB Video Driver allows an authorized attacker to elevate privileges locally...

PT-2026-87587

Integer overflow or wraparound in Windows USB Video Driver allows an authorized attacker to elevate privileges locally...

CVE-2026-69319: Concurrent Execution using Shared Resource with Improper Synchronization

Concurrent execution using shared resource with improper synchronization 'race condition' in Windows USB Video Driver allows an authorized attacker to elevate privileges locally...

CVE-2026-69401: Use After Free

Use after free in Audio Video Control Transport Protocol allows an authorized attacker to elevate privileges locally...

PT-2026-87364

Name of the Vulnerable Software and Affected Versions Windows USB Video Driver affected versions not specified Description A race condition occurs in the Windows USB Video Driver due to improper synchronization when using a shared resource. This allows an authorized attacker to elevate privileges...

PT-2026-87877

Name of the Vulnerable Software and Affected Versions Windows USB Video Driver affected versions not specified Description A heap-based buffer overflow occurs in the Windows USB Video Driver. This issue allows an authorized attacker to elevate privileges locally on the system. A heap-based buffer...

Symlink Attack

Overview Affected versions of this package are vulnerable to Symlink Attack via the video decoder. An attacker can bypass write restrictions by exploiting a race condition involving symlink swaps between policy validation and file write operations. Remediation A fix was pushed into the master...

Symlink Attack

Overview Magick.NET-Q16-x64 is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this package are...

Symlink Attack

Overview Magick.NET-Q16-AnyCPU is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this package are...

Symlink Attack

Overview Magick.NET-Q16-OpenMP-x64 is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this package a...

Symlink Attack

Overview Magick.NET-Q16-HDRI-OpenMP-arm64 is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this...

Symlink Attack

Overview Magick.NET-Q16-HDRI-arm64 is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this package a...