PT-2026-81618

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 152.0.7977.65 Description An out-of-bounds read exists in Skia, a graphics library, which allows a remote attacker to potentially read memory inside the sandbox by using a crafted media file. Recommendations...

PT-2026-81718

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 152.0.7977.65 Description Improper input validation in the Media component allows a remote attacker who has compromised the renderer process to potentially execute arbitrary code outside the sandbox by using a...

PT-2026-81737

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 152.0.7977.65 Description Incorrect authorization in the Media component allows a remote attacker who has compromised the renderer process to bypass system access restrictions by using a crafted HTML page...

PT-2026-81602

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 152.0.7977.65 Description An out of bounds read exists in the Media component. This allows a remote attacker who has already compromised the renderer process to read memory outside the sandbox by using a special...

PT-2026-81671

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 152.0.7977.65 Description Improper enforcement of behavioral workflow in Media allows a remote attacker who has compromised the renderer process to potentially execute arbitrary code outside the sandbox via a...

PT-2026-81742

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 152.0.7977.65 Description Improper input validation in the Media component allows a remote attacker to potentially execute arbitrary code outside the sandbox by inducing a user to visit a crafted HTML page...

PT-2026-81531

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 152.0.7977.65 Description Improper input validation in the Media component allows a remote attacker to potentially execute arbitrary code outside the sandbox by inducing a user to visit a crafted HTML page...

OPENSUSE-SU-2026:11593-1 c-ares-devel-1.34.8-1.1 on GA media

These are all security issues fixed in the c-ares-devel-1.34.8-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:11599-1 ucode-intel-20260812-1.1 on GA media

These are all security issues fixed in the ucode-intel-20260812-1.1 package on the GA media of openSUSE Tumbleweed...

PT-2026-81574

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 152.0.7977.65 Description Improper input validation in the Media component allows a remote attacker to potentially execute arbitrary code outside the sandbox by inducing a user to visit a crafted HTML page...

CVE-2026-78267

creationtimestamp| type| source ---|---|--- 2026-08-24 22:26:28+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/goyackjrwfsqj 2026-08-24 23:00:44+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mtufueuszj2b 2026-08-24 23:30:05+00:00| seen|...

CVE-2026-77635

creationtimestamp| type| source ---|---|--- 2026-08-24 21:50:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mtubw2onnx2j 2026-08-24 22:07:50+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3mtucvroixe2b 2026-08-25 08:00:05+00:00| seen|...

CVE-2025-68825

creationtimestamp| type| source ---|---|--- 2026-08-24 18:53:50+00:00| seen| https://bsky.app/profile/postac001.bsky.social/post/3mtty2veg572m...

CVE-2026-28171

creationtimestamp| type| source ---|---|--- 2026-08-24 18:14:25+00:00| seen| https://bsky.app/profile/hugovalters.bsky.social/post/3mttvufexuw2i 2026-08-24 18:14:47+00:00| seen| https://mastodon.social/users/hugovalters/statuses/117151843283303878...

USN-8671-1: FFmpeg vulnerabilities

Adrian Junge was discovered that FFmpeg incorrectly handled certain media files. An attacker could possibly use this issue to cause a denial of service or execute arbitrary code. CVE-2026-66036, CVE-2026-66039 Adrian Junge discovered that FFmpeg incorrectly handled certain media files. An attacke...

USN-8671-1 ffmpeg vulnerabilities

Adrian Junge was discovered that FFmpeg incorrectly handled certain media files. An attacker could possibly use this issue to cause a denial of service or execute arbitrary code. CVE-2026-66036, CVE-2026-66039 Adrian Junge discovered that FFmpeg incorrectly handled certain media files. An attacke...

CVE-2026-59568

creationtimestamp| type| source ---|---|--- 2026-08-24 15:50:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mttnscki7u2p 2026-08-24 16:07:47+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3mttorycio22e 2026-08-24 18:12:34+00:00| seen|...

Malicious code in dpg-media-7ehemel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4a904ad03d7041e21fe41a101c6a2db4a6aa3106f7b36394208bb4a5a39ee594 npm package [email protected] executes node index.js from a preinstall lifecycle script that harvests installer identity and environment...

MAL-2026-14411 Malicious code in dpg-media-7ehemel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4a904ad03d7041e21fe41a101c6a2db4a6aa3106f7b36394208bb4a5a39ee594 npm package [email protected] executes node index.js from a preinstall lifecycle script that harvests installer identity and environment...

CVE-2026-77995

creationtimestamp| type| source ---|---|--- 2026-08-24 13:30:28+00:00| seen| https://infosec.exchange/users/offseq/statuses/117150726686144491 2026-08-24 13:30:29+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mttfyp326q2f 2026-08-24 15:50:06+00:00| seen|...