ffmpeg: FFmpeg: Arbitrary code execution via crafted CAF file

A flaw was found in FFmpeg. A remote attacker could exploit a signed integer overflow vulnerability in the MACE6 audio decoder by providing a specially crafted CAF Core Audio Format file. This malicious file manipulates the bytesperpacket value, leading to an undersized memory allocation and a he...

FFmpeg: FFmpeg: Arbitrary code execution, information disclosure, or denial of service via crafted ADX/AAX audio files

A flaw was found in FFmpeg. A remote attacker could exploit an out-of-bounds memory access vulnerability in the ADX audio decoder by supplying a specially crafted ADX or AAX audio file. This could lead to the attacker triggering both out-of-bounds reads and writes, potentially resulting in...

ffmpeg: FFmpeg: Arbitrary code execution via heap buffer overflow in VobSub subtitle demuxer.

A flaw was found in FFmpeg, a widely used multimedia framework. This vulnerability, a heap buffer overflow in the VobSub subtitle demuxer, allows a remote attacker to corrupt memory. By providing a specially crafted subtitle file, an attacker can trigger unbounded writes, which could lead to...

ffmpeg: FFmpeg: Remote code execution via out-of-bounds write in MagicYUV decoder

A flaw was found in FFmpeg's libavcodec library. This out-of-bounds write vulnerability, specifically within the MagicYUV decoder, could allow a remote attacker to execute arbitrary code on the affected system. In other scenarios, it may lead to a denial-of-service, making the system unavailable...

CVE-2026-103500

A flaw was found in Thunderbird. A remote attacker could exploit this vulnerability by convincing a user to open an email that is 2GB or larger, triggering a heap buffer overflow. This flaw allows an attacker to corrupt memory, which may cause an application crash, resulting in a Denial of Servic...

CVE-2026-102676

A flaw was found in Electron. This vulnerability allows untrusted guest content loaded inside an embedded web view to run background worker tasks with elevated privileges. By enabling Node.js integration within background web workers, an attacker can bypass security restrictions set by the host...

CVE-2026-47505

A flaw was found in nvidia-driver. A local user can exploit a use-after-free condition in the kernel mode layer, which occurs when memory is improperly accessed after it has been released. A successful exploit could allow an attacker to achieve arbitrary code execution, privilege escalation, Deni...

CVE-2026-47501

A flaw was found in the NVIDIA GPU Display Driver. A local user can exploit an out-of-bounds write vulnerability in the kernel mode layer by supplying mismatched memory buffers during event buffer setup. Successful exploitation could lead to privilege escalation, arbitrary code execution, denial ...

CVE-2026-47489

A flaw was found in the NVIDIA GPU display driver. The driver's kernel mode layer does not properly preserve permissions on read-only memory. A local user can exploit this vulnerability to achieve privilege escalation or arbitrary code execution. Successful exploitation may also lead to data...

CVE-2026-95339

A flaw was found in chromium-browser. A use-after-free vulnerability in the ServiceWorker component allows a remote attacker to execute arbitrary code outside the application's security sandbox. By convincing a victim to load a specially crafted HTML page, the attacker can exploit improper memory...

CVE-2026-95331

A flaw was found in chromium-browser. An out-of-bounds write vulnerability in the Almost Native Graphics Layer Engine ANGLE component may allow a remote attacker to execute arbitrary code outside the browser sandbox. By convincing a user to visit a specially crafted web page, an attacker can...

CVE-2026-95313

A flaw was found in chromium-browser. This flaw allows a remote attacker to execute arbitrary code outside the browser sandbox due to a use-after-free vulnerability in the Fullscreen component, where previously released memory is improperly accessed. By enticing a user to open a specially crafted...

CLEANSTART-2025-OK96384 remote code execution vulnerability exists when Git for Visual Studio improperly sanitizes input, aka 'Git for Visual Studio Remote Code Execution Vulnerability'

Security vulnerability affects the git package. A remote code execution vulnerability exists when Git for Visual Studio improperly sanitizes input, aka 'Git for Visual Studio Remote Code Execution Vulnerability'...

CVE-2025-66478

1 POST / HTTP/1.1 Host: localhost:3000 User-Agent: Mozilla/5.0 Windows NT 10.0; Win64; x64 AppleWebKit/537.36 KHTML, like Gecko Chrome/60.0.3112.113 Safari/537.36 Assetnote/1.0.0 Next-Action: x X-Nextjs-Request-Id: b5dce965 Content-Type: multipart/form-data;...

Exploit for CVE-2026-12227

CVE-2026-12227: Visual Composer Website Builder Unauthenticated...

CVE-2026-55107

Kobako is a Ruby gem that embeds a Wasm-isolated mruby interpreter inside applications, allowing execution of untrusted Ruby scripts LLM-generated code, user formulas, student submissions, third-party plugins in-process without giving them access to host memory, files, network, or credentials. Fr...

CVE-2026-103474

yii2-starter-kit through 4.2.0 fails to validate file types in the backend storage upload actions, allowing authenticated managers to upload PHP files. Attackers with manager role can upload PHP scripts to the web-accessible storage directory and request them to execute arbitrary code on the serv...

CVE-2026-103473

Deno versions 2.7.0 through 2.9.7 on Windows contain a command injection vulnerability in node:childprocess where shell arguments are escaped for the wrong shell type. Attackers can inject OS commands by passing untrusted arguments with the shell option, allowing arbitrary command execution with...

gvfs: SFTP: heap-based buffer overflow in read_reply()

A flaw was found in the SFTP backend in gvfs. When mounting a share and reading a file, a malicious SFTP server can cause readreply to process a length that exceeds the size requested by the client. The function does not verify the server-provided length against the allocated buffer size, causing...

[SECURITY] [DSA 6533-1] firefox-esr security update

------------------------------------------------------------------------- Debian Security Advisory DSA-6533-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff September 30, 2026 https://www.debian.org/security/faq -...