PT-2026-81791

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 152.0.7977.65 Description A buffer overflow exists in the Media component. This flaw allows a remote attacker to execute arbitrary code within the sandbox by inducing a user to visit a specially crafted HTML pag...

PT-2026-81140

Grav CMS before 2.0.16 contains a path traversal vulnerability in the media directory Twig function that fails to validate filesystem paths, allowing authenticated users to enumerate and access files outside intended scope. Attackers with page authoring privileges can supply arbitrary filesystem...

PT-2026-81273

The Media Sweep – WordPress Media Cleaner plugin for WordPress is vulnerable to generic SQL Injection via the 'fields' parameter in all versions up to, and including, 1.1.3 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. Th...

PT-2026-81618

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 152.0.7977.65 Description An out-of-bounds read exists in Skia, a graphics library, which allows a remote attacker to potentially read memory inside the sandbox by using a crafted media file. Recommendations...

PT-2026-81718

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 152.0.7977.65 Description Improper input validation in the Media component allows a remote attacker who has compromised the renderer process to potentially execute arbitrary code outside the sandbox by using a...

PT-2026-81737

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 152.0.7977.65 Description Incorrect authorization in the Media component allows a remote attacker who has compromised the renderer process to bypass system access restrictions by using a crafted HTML page...

PT-2026-81602

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 152.0.7977.65 Description An out of bounds read exists in the Media component. This allows a remote attacker who has already compromised the renderer process to read memory outside the sandbox by using a special...

PT-2026-81671

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 152.0.7977.65 Description Improper enforcement of behavioral workflow in Media allows a remote attacker who has compromised the renderer process to potentially execute arbitrary code outside the sandbox via a...

PT-2026-81742

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 152.0.7977.65 Description Improper input validation in the Media component allows a remote attacker to potentially execute arbitrary code outside the sandbox by inducing a user to visit a crafted HTML page...

PT-2026-81531

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 152.0.7977.65 Description Improper input validation in the Media component allows a remote attacker to potentially execute arbitrary code outside the sandbox by inducing a user to visit a crafted HTML page...

PT-2026-81574

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 152.0.7977.65 Description Improper input validation in the Media component allows a remote attacker to potentially execute arbitrary code outside the sandbox by inducing a user to visit a crafted HTML page...

OPENSUSE-SU-2026:11599-1 ucode-intel-20260812-1.1 on GA media

These are all security issues fixed in the ucode-intel-20260812-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:11593-1 c-ares-devel-1.34.8-1.1 on GA media

These are all security issues fixed in the c-ares-devel-1.34.8-1.1 package on the GA media of openSUSE Tumbleweed...

CVE-2026-78267

creationtimestamp| type| source ---|---|--- 2026-08-24 22:26:28+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/goyackjrwfsqj 2026-08-24 23:00:44+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mtufueuszj2b 2026-08-24 23:30:05+00:00| seen|...

CVE-2026-77635

creationtimestamp| type| source ---|---|--- 2026-08-24 21:50:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mtubw2onnx2j 2026-08-24 22:07:50+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3mtucvroixe2b 2026-08-25 08:00:05+00:00| seen|...

CVE-2025-68825

creationtimestamp| type| source ---|---|--- 2026-08-24 18:53:50+00:00| seen| https://bsky.app/profile/postac001.bsky.social/post/3mtty2veg572m...

CVE-2026-28171

creationtimestamp| type| source ---|---|--- 2026-08-24 18:14:25+00:00| seen| https://bsky.app/profile/hugovalters.bsky.social/post/3mttvufexuw2i 2026-08-24 18:14:47+00:00| seen| https://mastodon.social/users/hugovalters/statuses/117151843283303878...

USN-8671-1: FFmpeg vulnerabilities

Adrian Junge was discovered that FFmpeg incorrectly handled certain media files. An attacker could possibly use this issue to cause a denial of service or execute arbitrary code. CVE-2026-66036, CVE-2026-66039 Adrian Junge discovered that FFmpeg incorrectly handled certain media files. An attacke...

USN-8671-1 ffmpeg vulnerabilities

Adrian Junge was discovered that FFmpeg incorrectly handled certain media files. An attacker could possibly use this issue to cause a denial of service or execute arbitrary code. CVE-2026-66036, CVE-2026-66039 Adrian Junge discovered that FFmpeg incorrectly handled certain media files. An attacke...

CVE-2026-59568

creationtimestamp| type| source ---|---|--- 2026-08-24 15:50:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mttnscki7u2p 2026-08-24 16:07:47+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3mttorycio22e 2026-08-24 18:12:34+00:00| seen|...