PT-2026-76443

These are all security issues fixed in the go1.26-1.26.6-1.1 package on the GA media of openSUSE Tumbleweed...

PT-2026-76446

These are all security issues fixed in the kubevirt1.9-container-disk-1.9.0-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:11516-1 go1.25-1.25.13-1.1 on GA media

These are all security issues fixed in the go1.25-1.25.13-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:11520-1 kubevirt1.9-container-disk-1.9.0-1.1 on GA media

These are all security issues fixed in the kubevirt1.9-container-disk-1.9.0-1.1 package on the GA media of openSUSE Tumbleweed...

PT-2026-76440

These are all security issues fixed in the containerized-data-importer1.66-api-1.66.0-1.1 package on the GA media of openSUSE Tumbleweed...

PT-2026-76448

These are all security issues fixed in the obs-service-cargo-7.2.2-2.1 package on the GA media of openSUSE Tumbleweed...

CVE-2026-48441

creationtimestamp| type| source ---|---|--- 2026-08-14 17:37:07+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mt2p4intoz2u...

CVE-2026-73635

creationtimestamp| type| source ---|---|--- 2026-08-14 10:24:15+00:00| seen| https://bsky.app/profile/omo.bsky.social/post/3mszwwgaw2c23 2026-08-15 12:50:20+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/746ygwaxgtwpm 2026-08-15 13:36:32+00:00| seen|...

CVE-2026-62663

A flaw was found in Banks. An attacker who can control template variables processed by Banks can exploit a path traversal vulnerability in the media filters image, audio, video, document. This allows the attacker to read arbitrary files on the system where Banks is running, such as sensitive...

Divi 5.0 - 5.8.1 - Contributor+ Stored XSS via Social Media Follow Skype URL

Description The theme does not properly escape some of its Social Media Follow module settings before outputting them in link attributes, allowing users with a role as low as contributor to store JavaScript which will run when a higher privileged user, such as an administrator, views the post. Po...

CVE-2026-66478

creationtimestamp| type| source ---|---|--- 2026-08-13 16:40:03+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3msy3hkgk7y2e...

CVE-2026-19163

A flaw was found in the Media component of Google Chrome. This use-after-free vulnerability could allow a remote attacker, who has already compromised the renderer process, to potentially escape the browser's sandbox. This could be achieved by enticing a user to visit a specially crafted HTML pag...

CVE-2026-19171

A flaw was found in chromium-browser. This use-after-free vulnerability in the Media component allows a remote attacker to potentially escape the browser's security sandbox. Exploitation can occur by enticing a user to visit a specially crafted HTML page...

CVE-2026-15039

creationtimestamp| type| source ---|---|--- 2026-08-12 20:20:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3msvxc222lj2e...

CVE-2026-67285

creationtimestamp| type| source ---|---|--- 2026-08-12 14:30:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3msvdq7tpqe27 2026-08-12 15:42:55+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/ddmpzgp7axc2j...

Linux Distros Unpatched Vulnerability : CVE-2026-68219

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - media: nxp: imx8-isi: Fix potential out-of-bounds issues The maximum downscaling factor supported by ISI can be up to 16. Add minimum value constraint before...

Linux Distros Unpatched Vulnerability : CVE-2026-68224

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - media: mali-c55: Fix possible ERRPTR in enablestreams The mediapadremotepadunique function returns either a valid pointer or an ERRPTR on failure -ENOTUNIQ if...

Linux Distros Unpatched Vulnerability : CVE-2026-68228

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - media: chips-media: wave5: Move srcbuf Removal to finishencode During encoder processing, there is a case where the IRQ response could return the buffer back to...

CVE-2026-66147

creationtimestamp| type| source ---|---|--- 2026-08-11 23:30:06+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mstrgwb6cj2g 2026-08-12 00:45:39+00:00| seen| https://bsky.app/profile/securityonline.bsky.social/post/3mstvnyyxdd2c 2026-08-12 01:57:31+00:00| seen|...

CVE-2026-68216

A flaw was found in the Linux kernel's pwc media driver. When the startstreaming function fails, it does not properly return queued buffers, leading to a resource leak. This can occur if the USB device is disconnected or if a mutex lock is interrupted. A local attacker could potentially exploit...