CVE-2026-97575

A flaw was found in the Linux kernel's Video4Linux2 V4L2 subsystem. The stateless AV1 video decoding interface fails to properly validate tile dimensions in frame control requests. A local attacker can exploit this vulnerability by submitting a specially crafted frame configuration with excessive...

CVE-2026-90914: Improper Neutralization of Input During Web Page Generation

Joomla! Core - 20260904 - Core - XSS in the generic media output layouts in Joomla 4.0.0-5.4.8, 6.0.0-6.1.3 - Lack of escaping leads to an XSS vulnerability in the generic audio and video output layouts...

CVE-2026-102569: Improper Neutralization of Special Elements used in an SQL Command

ClipBucket v5 through 5.5.3-197 contains a time-based blind SQL injection vulnerability in the admin video edit function where the videoid parameter is concatenated into an UPDATE statement without proper escaping. An authenticated administrator with videomoderation permission can inject arbitrar...

CVE-2026-100756: Improper Restriction of Operations within the Bounds of a Memory Buffer

Incorrect boundary conditions in the Audio/Video: Playback component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbird 153.4, Firefox 157, Firefox ESR 115.42, and Firefox ESR 140.17...

Mozilla Firefox ESR < 115.42

The version of Firefox ESR installed on the remote macOS or Mac OS X host is prior to 115.42. It is, therefore, affected by multiple vulnerabilities as referenced in the mfsa2026-98 advisory. - Sandbox escape due to incorrect boundary conditions in the Graphics component. This vulnerability was...

Mozilla Firefox < 157.0

The version of Firefox installed on the remote Windows host is prior to 157.0. It is, therefore, affected by multiple vulnerabilities as referenced in the mfsa2026-97 advisory. - Privilege escalation in the Places component. This vulnerability was fixed in Firefox ESR 153.4 and Firefox 157...

CVE-2026-100805: Concurrent Execution using Shared Resource with Improper Synchronization

Race condition, use-after-free in the Audio/Video component. This vulnerability was fixed in Thunderbird 157 and Firefox 157...

PT-2026-102579

Name of the Vulnerable Software and Affected Versions Thunderbird versions prior to 157 Firefox versions prior to 157 Description A race condition leads to a use-after-free issue within the Audio/Video component. A race condition occurs when the timing or order of events affects the correctness o...

PT-2026-102530

Name of the Vulnerable Software and Affected Versions Firefox versions prior to 157 Firefox ESR versions prior to 115.42 Firefox ESR versions prior to 140.17 Firefox ESR versions prior to 153.4 Thunderbird versions prior to 157 Description Incorrect boundary conditions exist within the Audio/Vide...

Mozilla Firefox ESR < 140.17

The version of Firefox ESR installed on the remote Windows host is prior to 140.17. It is, therefore, affected by multiple vulnerabilities as referenced in the mfsa2026-99 advisory. - Sandbox escape due to incorrect boundary conditions in the Graphics component. This vulnerability was fixed in...

Mozilla Firefox ESR < 115.42

The version of Firefox ESR installed on the remote Windows host is prior to 115.42. It is, therefore, affected by multiple vulnerabilities as referenced in the mfsa2026-98 advisory. - Sandbox escape due to incorrect boundary conditions in the Graphics component. This vulnerability was fixed in...

Mozilla Firefox ESR < 140.17

The version of Firefox ESR installed on the remote macOS or Mac OS X host is prior to 140.17. It is, therefore, affected by multiple vulnerabilities as referenced in the mfsa2026-99 advisory. - Sandbox escape due to incorrect boundary conditions in the Graphics component. This vulnerability was...

Mozilla Firefox < 157.0

The version of Firefox installed on the remote macOS or Mac OS X host is prior to 157.0. It is, therefore, affected by multiple vulnerabilities as referenced in the mfsa2026-97 advisory. - Privilege escalation in the Places component. This vulnerability was fixed in Firefox ESR 153.4 and Firefox...

PT-2026-102627

🚨 CVE-2026-102569 ClipBucket v5 through 5.5.3-197 contains a time-based blind SQL injection vulnerability in the admin video edit function where the videoid parameter is concatenated into an UPDATE statement without proper escaping. An authenticated administrator with video moderation permission...

Important: firefox

Issue Overview: Sandbox escape due to use-after-free in the DOM: Navigation component. This vulnerability was fixed in Firefox 155, Firefox ESR 115.40, Firefox ESR 140.15, and Firefox ESR 153.2. CVE-2026-84119 Use-after-free in the Audio/Video component. This vulnerability was fixed in Firefox 15...

CVE-2026-95318: Heap-based Buffer Overflow

Buffer overflow in Video in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: High...

FreeBSD: VID-bd24bc14-b9a9-11f1-bf98-a8a1599412c6 (CVE-2026-95318): chromium -- security fixes

Buffer overflow in Video in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: High...

Security Vulnerabilities fixed in Firefox ESR 153.4 — Mozilla

Note : We have changed how we publish advisories. We no longer roll all internally identified memory safety vulnerabilities into a single CVE and are now issuing an advisory for every individual bug. CVE-2026-100756: Incorrect boundary conditions in the Audio/Video: Playback component Reporter...

PT-2026-102557

Name of the Vulnerable Software and Affected Versions Firefox versions prior to 157 Firefox ESR versions prior to 115.42 Firefox ESR versions prior to 140.17 Firefox ESR versions prior to 153.4 Thunderbird versions prior to 157 Description Uninitialized memory exists within the Audio/Video...

CVE-2026-100783: Use of Uninitialized Variable

Uninitialized memory in the Audio/Video component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbird 153.4, Firefox 157, Firefox ESR 115.42, and Firefox ESR 140.17...