CVE-2026-9985

Insufficient validation of untrusted input in Media in Google Chrome on ChromeOS prior to 148.0.7778.216 allowed a remote attacker who had compromised the renderer process to obtain potentially sensitive information from process memory via a crafted HTML page. Chromium security severity: High...

CVE-2025-12366

The Page Builder: Pagelayer – Drag and Drop website builder plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 2.0.5 via the pagelayerreplacepage function due to missing validation on a user controlled key. This makes it possible for...

EUVD-2011-3090

Malware in sbrugna...

EUVD-2022-52170

Malicious code in bioql PyPI...

EUVD-2023-27502

Malicious code in bioql PyPI...

CVE-2024-26189

creationtimestamp| type| source ---|---|--- 2025-08-07 02:21:03+00:00| seen| https://bsky.app/profile/nihonmatsu.bsky.social/post/3lvrohwexas2s 2025-08-07 02:21:03+00:00| seen| https://bsky.app/profile/nihonmatsu.bsky.social/post/3lvrohu2y2s2s 2025-08-07 02:21:04+00:00| seen|...

CVE-2022-49982

In the Linux kernel, the following vulnerability has been resolved: media: pvrusb2: fix memory leak in pvrprobe The error handling code in pvr2hdwcreate forgets to unregister the v4l2 device. When pvr2hdwcreate returns back to pvr2contextcreate, it calls pvr2contextdestroy to destroy context, but...

Chromium: CVE-2025-5958 Use after free in Media

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

CVE-2025-31928

creationtimestamp| type| source ---|---|--- 2025-05-16 18:37:39+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lpcodo5zuk2p...

CVE-2025-1976

creationtimestamp| type| source ---|---|--- 2025-04-22 07:47:32+00:00| seen| https://bsky.app/profile/andranglin.bsky.social/post/3lnf6t77jcc25 2025-04-23 21:02:21+00:00| seen| https://bsky.app/profile/beikokucyber.bsky.social/post/3lnj3pgntgn2t 2025-04-24 04:05:58+00:00| seen|...

API Security Is Key to Cyber Resilience in Media and Entertainment

For media and entertainment companies, API expansion means a broader attack surface. Security needs to stay a step ahead...

CVE-2025-27730

Use after free in Windows Digital Media allows an authorized attacker to elevate privileges locally...

CVE-2024-48887

creationtimestamp| type| source ---|---|--- 2025-04-08 15:53:00+00:00| seen| https://thehackernews.com/2025/04/fortinet-urges-fortiswitch-upgrades-to.html 2025-04-08 17:40:17+00:00| seen| https://bsky.app/profile/cyberalerts.bsky.social/post/3lmczgcbtcy2e 2025-04-08 19:08:09+00:00| seen|...

CVE-2024-58125

creationtimestamp| type| source ---|---|--- 2025-04-07 05:48:52+00:00| seen| https://mastodon.social/users/CyberSignaler/statuses/114295107184442261...

CVE-2025-3047

creationtimestamp| type| source ---|---|--- 2025-03-31 15:31:11+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/9676 2025-03-31 16:40:47+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114258034481176074 2025-03-31 16:40:47+00:00| seen|...

CVE-2025-29775

creationtimestamp| type| source ---|---|--- 2025-03-14 17:49:09+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/7619 2025-03-14 17:56:13+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114162071842369847 2025-03-14 18:40:26+00:00| seen|...

CVE-2025-21391

creationtimestamp| type| source ---|---|--- 2025-02-11 18:07:13+00:00| seen| https://infosec.exchange/users/screaminggoat/statuses/113986583418117641 2025-02-11 18:08:38+00:00| seen| https://www.thezdi.com/blog/2025/2/11/the-february-2025-security-update-review 2025-02-11 18:18:12+00:00| seen|...

Important: kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: media: uvcvideo: Skip parsing frames of type UVCVSUNDEFINED in uvcparseformat CVE-2024-53104 For more details about the security issues, including the impact, a CVSS score, acknowledgment...

CVE-2025-24804

CVE-2025-24804 affects MobSF (Mobile Security Framework). A flaw in the Info.plist CFBundleIdentifier parsing allows an attacker to inject special characters into the bundle ID, causing the application to fail to render content and throw a 500 error (DoS-like unavailability). The vulnerability is...

CVE-2025-21310

Windows Digital Media Elevation of Privilege Vulnerability...