PT-2026-66015

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 151.0.7922.72 Description A side-channel information leakage issue exists in the Media component. This flaw allows a remote attacker to leak cross-origin data, which is data belonging to a different origin than...

EUVD-2026-42051

A logic vulnerability was found in GStreamer's webrtcbin component. The checksdpcrypto function contains an inverted boolean condition that causes it to accept remote SDP offers or answers that lack the required a=fingerprint attribute, while incorrectly rejecting those that include it. An attack...

EUVD-2026-37535

Inappropriate implementation in Media in Google Chrome prior to 149.0.7827.155 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page. Chromium security severity: High...

CVE-2026-9985

Insufficient validation of untrusted input in Media in Google Chrome on ChromeOS prior to 148.0.7778.216 allowed a remote attacker who had compromised the renderer process to obtain potentially sensitive information from process memory via a crafted HTML page. Chromium security severity: High...

CVE-2025-12366

The Page Builder: Pagelayer – Drag and Drop website builder plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 2.0.5 via the pagelayerreplacepage function due to missing validation on a user controlled key. This makes it possible for...

EUVD-2011-3090

Malware in sbrugna...

EUVD-2023-27502

Malicious code in bioql PyPI...

EUVD-2022-52170

Malicious code in bioql PyPI...

CVE-2024-26189

creationtimestamp| type| source ---|---|--- 2025-08-07 02:21:03+00:00| seen| https://bsky.app/profile/nihonmatsu.bsky.social/post/3lvrohwexas2s 2025-08-07 02:21:03+00:00| seen| https://bsky.app/profile/nihonmatsu.bsky.social/post/3lvrohu2y2s2s 2025-08-07 02:21:04+00:00| seen|...

CVE-2022-49982

In the Linux kernel, the following vulnerability has been resolved: media: pvrusb2: fix memory leak in pvrprobe The error handling code in pvr2hdwcreate forgets to unregister the v4l2 device. When pvr2hdwcreate returns back to pvr2contextcreate, it calls pvr2contextdestroy to destroy context, but...

Chromium: CVE-2025-5958 Use after free in Media

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

CVE-2025-31928

creationtimestamp| type| source ---|---|--- 2025-05-16 18:37:39+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lpcodo5zuk2p...

CVE-2025-1976

creationtimestamp| type| source ---|---|--- 2025-04-22 07:47:32+00:00| seen| https://bsky.app/profile/andranglin.bsky.social/post/3lnf6t77jcc25 2025-04-23 21:02:21+00:00| seen| https://bsky.app/profile/beikokucyber.bsky.social/post/3lnj3pgntgn2t 2025-04-24 04:05:58+00:00| seen|...

API Security Is Key to Cyber Resilience in Media and Entertainment

For media and entertainment companies, API expansion means a broader attack surface. Security needs to stay a step ahead...

CVE-2025-27730

Use after free in Windows Digital Media allows an authorized attacker to elevate privileges locally...

CVE-2024-48887

creationtimestamp| type| source ---|---|--- 2025-04-08 15:53:00+00:00| seen| https://thehackernews.com/2025/04/fortinet-urges-fortiswitch-upgrades-to.html 2025-04-08 17:40:17+00:00| seen| https://bsky.app/profile/cyberalerts.bsky.social/post/3lmczgcbtcy2e 2025-04-08 19:08:09+00:00| seen|...

CVE-2024-58125

creationtimestamp| type| source ---|---|--- 2025-04-07 05:48:52+00:00| seen| https://mastodon.social/users/CyberSignaler/statuses/114295107184442261...

CVE-2025-3047

creationtimestamp| type| source ---|---|--- 2025-03-31 15:31:11+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/9676 2025-03-31 16:40:47+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114258034481176074 2025-03-31 16:40:47+00:00| seen|...

CVE-2025-29775

creationtimestamp| type| source ---|---|--- 2025-03-14 17:49:09+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/7619 2025-03-14 17:56:13+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114162071842369847 2025-03-14 18:40:26+00:00| seen|...

CVE-2025-21391

creationtimestamp| type| source ---|---|--- 2025-02-11 18:07:13+00:00| seen| https://infosec.exchange/users/screaminggoat/statuses/113986583418117641 2025-02-11 18:08:38+00:00| seen| https://www.thezdi.com/blog/2025/2/11/the-february-2025-security-update-review 2025-02-11 18:18:12+00:00| seen|...