PT-2026-81273

The Media Sweep – WordPress Media Cleaner plugin for WordPress is vulnerable to generic SQL Injection via the 'fields' parameter in all versions up to, and including, 1.1.3 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. Th...

PT-2026-81618

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 152.0.7977.65 Description An out-of-bounds read exists in Skia, a graphics library, which allows a remote attacker to potentially read memory inside the sandbox by using a crafted media file. Recommendations...

PT-2026-81742

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 152.0.7977.65 Description Improper input validation in the Media component allows a remote attacker to potentially execute arbitrary code outside the sandbox by inducing a user to visit a crafted HTML page...

PT-2026-81718

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 152.0.7977.65 Description Improper input validation in the Media component allows a remote attacker who has compromised the renderer process to potentially execute arbitrary code outside the sandbox by using a...

PT-2026-81737

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 152.0.7977.65 Description Incorrect authorization in the Media component allows a remote attacker who has compromised the renderer process to bypass system access restrictions by using a crafted HTML page...

PT-2026-81602

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 152.0.7977.65 Description An out of bounds read exists in the Media component. This allows a remote attacker who has already compromised the renderer process to read memory outside the sandbox by using a special...

PT-2026-81671

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 152.0.7977.65 Description Improper enforcement of behavioral workflow in Media allows a remote attacker who has compromised the renderer process to potentially execute arbitrary code outside the sandbox via a...

OPENSUSE-SU-2026:11593-1 c-ares-devel-1.34.8-1.1 on GA media

These are all security issues fixed in the c-ares-devel-1.34.8-1.1 package on the GA media of openSUSE Tumbleweed...

PT-2026-81531

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 152.0.7977.65 Description Improper input validation in the Media component allows a remote attacker to potentially execute arbitrary code outside the sandbox by inducing a user to visit a crafted HTML page...

PT-2026-81574

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 152.0.7977.65 Description Improper input validation in the Media component allows a remote attacker to potentially execute arbitrary code outside the sandbox by inducing a user to visit a crafted HTML page...

OPENSUSE-SU-2026:11599-1 ucode-intel-20260812-1.1 on GA media

These are all security issues fixed in the ucode-intel-20260812-1.1 package on the GA media of openSUSE Tumbleweed...

CVE-2026-78267

creationtimestamp| type| source ---|---|--- 2026-08-24 22:26:28+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/goyackjrwfsqj 2026-08-24 23:00:44+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mtufueuszj2b 2026-08-24 23:30:05+00:00| seen|...

CVE-2026-77635

creationtimestamp| type| source ---|---|--- 2026-08-24 21:50:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mtubw2onnx2j 2026-08-24 22:07:50+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3mtucvroixe2b 2026-08-25 08:00:05+00:00| seen|...

CVE-2025-68825

creationtimestamp| type| source ---|---|--- 2026-08-24 18:53:50+00:00| seen| https://bsky.app/profile/postac001.bsky.social/post/3mtty2veg572m...

CVE-2026-28171

creationtimestamp| type| source ---|---|--- 2026-08-24 18:14:25+00:00| seen| https://bsky.app/profile/hugovalters.bsky.social/post/3mttvufexuw2i 2026-08-24 18:14:47+00:00| seen| https://mastodon.social/users/hugovalters/statuses/117151843283303878...

USN-8671-1: FFmpeg vulnerabilities

Adrian Junge was discovered that FFmpeg incorrectly handled certain media files. An attacker could possibly use this issue to cause a denial of service or execute arbitrary code. CVE-2026-66036, CVE-2026-66039 Adrian Junge discovered that FFmpeg incorrectly handled certain media files. An attacke...

USN-8671-1 ffmpeg vulnerabilities

Adrian Junge was discovered that FFmpeg incorrectly handled certain media files. An attacker could possibly use this issue to cause a denial of service or execute arbitrary code. CVE-2026-66036, CVE-2026-66039 Adrian Junge discovered that FFmpeg incorrectly handled certain media files. An attacke...

CVE-2026-59568

creationtimestamp| type| source ---|---|--- 2026-08-24 15:50:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mttnscki7u2p 2026-08-24 16:07:47+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3mttorycio22e 2026-08-24 18:12:34+00:00| seen|...

Malicious code in dpg-media-7ehemel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4a904ad03d7041e21fe41a101c6a2db4a6aa3106f7b36394208bb4a5a39ee594 npm package [email protected] executes node index.js from a preinstall lifecycle script that harvests installer identity and environment...

MAL-2026-14411 Malicious code in dpg-media-7ehemel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4a904ad03d7041e21fe41a101c6a2db4a6aa3106f7b36394208bb4a5a39ee594 npm package [email protected] executes node index.js from a preinstall lifecycle script that harvests installer identity and environment...