ROS-20260716-73-0010

The vulnerability of the Google Chrome browser’s Media component is related to insufficient verification of data authenticity. Exploiting this vulnerability could allow a malicious actor to cause service interruptions using a specially created video file...

ROS-20260716-73-0009

The vulnerability of the Google Chrome browser’s Media component is related to a potential overflow condition. Exploiting this vulnerability could allow an attacker to cause a service failure through the use of a specially created video file...

CVE-2026-15767

Heap buffer overflow in libyuv in Google Chrome on Windows prior to 150.0.7871.125 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted video file. Chromium security severity: High...

CVE-2026-15767

Heap buffer overflow in libyuv in Google Chrome on Windows prior to 150.0.7871.125 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted video file. Chromium security severity: High...

CVE-2026-15767

A heap buffer overflow vulnerability exists in libyuv within Google Chrome on Windows for versions prior to 150.0.7871.125 . This flaw allows a remote attacker to execute arbitrary code inside a sandbox by processing a crafted video file . The vulnerability impacts Microsoft Edge (Chromium-based)...

PT-2026-58730

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 150.0.7871.125 Description A heap buffer overflow exists in the libyuv library. This issue allows a remote attacker to execute arbitrary code within a sandbox by providing a specially crafted video file...

SUSE CVE-2026-15114

Out of bounds read and write in Codecs in Google Chrome prior to 150.0.7871.115 allowed a remote attacker to potentially exploit heap corruption via a crafted video file. Chromium security severity: High...

EUVD-2026-42485

Out of bounds read and write in Codecs in Google Chrome prior to 150.0.7871.115 allowed a remote attacker to potentially exploit heap corruption via a crafted video file. Chromium security severity: High...

CVE-2026-15114

Out of bounds read and write in Codecs in Google Chrome prior to 150.0.7871.115 allowed a remote attacker to potentially exploit heap corruption via a crafted video file. Chromium security severity: High...

CVE-2026-15114

Google Chrome and Microsoft Edge are vulnerable to an out-of-bounds read and write in the Codecs components. A remote attacker can exploit this via a crafted video file to trigger heap corruption or a service failure . The issue affects Google Chrome versions prior to 150.0.7871.115 . Remediation...

CVE-2026-15114: Out-of-bounds Read

Out of bounds read and write in Codecs in Google Chrome prior to 150.0.7871.115 allowed a remote attacker to potentially exploit heap corruption via a crafted video file. Chromium security severity: High...

SUSE CVE-2026-13858

Out of bounds read in FFmpeg in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted video file. Chromium security severity: Medium...

OESA-2026-2828 ffmpeg security update

FFmpeg is a complete and free Internet live audio and video broadcasting solution for Linux/Unix. It also includes a digital VCR. It can encode in real time in many formats including MPEG1 audio and video, MPEG4, h263, ac3, asf, avi, real, mjpeg, and flash. Security Fixes: A use-after-free...

EUVD-2026-40743

Insufficient validation of untrusted input in Media in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted video file. Chromium security severity: Low...

EUVD-2026-40544

Out of bounds read in FFmpeg in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted video file. Chromium security severity: Medium...

Linux Distros Unpatched Vulnerability : CVE-2026-14056

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Insufficient validation of untrusted input in Media in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process t...

PT-2026-54755

An access violation in the BaseSplitterFile::Read function of Aleksoid1978 MPC-BE before commit 4341cb3 allows attackers to cause a Denial of Service DoS via a crafted MP4 file...

CVE-2026-36912

A NULL pointer dereference in the AP4AtomSampleTable::GetSample function of Aleksoid1978 MPC-BE before commit 4341cb3 allows attackers to cause a Denial of Service DoS via a crafted MP4 file...

CVE-2026-36909

The Aleksoid1978 MPC-BE media player (versions before commit 4341cb3 ) is vulnerable to a NULL pointer dereference in the AP4_TkhdAtom::GetTrackId() function. An attacker can exploit this flaw by providing a crafted MP4 file , which leads to a Denial of Service (DoS) . Exploitation details and sp...

PT-2026-54754

A NULL pointer dereference in the AP4 TkhdAtom::GetTrackId function of Aleksoid1978 MPC-BE before commit 4341cb3 allows attackers to cause a Denial of Service DoS via a crafted MP4 file...