CVE-2026-62663

A flaw was found in Banks. An attacker who can control template variables processed by Banks can exploit a path traversal vulnerability in the media filters image, audio, video, document. This allows the attacker to read arbitrary files on the system where Banks is running, such as sensitive...

Divi 5.0 - 5.8.1 - Contributor+ Stored XSS via Social Media Follow Skype URL

Description The theme does not properly escape some of its Social Media Follow module settings before outputting them in link attributes, allowing users with a role as low as contributor to store JavaScript which will run when a higher privileged user, such as an administrator, views the post. Po...

CVE-2026-66478

creationtimestamp| type| source ---|---|--- 2026-08-13 16:40:03+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3msy3hkgk7y2e...

SUSE CVE-2026-68206

In the Linux kernel, the following vulnerability has been resolved: media: v4l2-ctrls: validate HEVC active reference counts HEVC slice parameters are shared stateless V4L2 controls, but the common validation path does not verify the active L0/L1 reference counts before driver-specific code...

SUSE CVE-2026-68207

In the Linux kernel, the following vulnerability has been resolved: media: ti: vpe: unwind v4l2 device registration on probe error If the vpetop resource is missing, vpeprobe returns -ENODEV after v4l2deviceregister has succeeded. Probe failures do not call the driver's remove callback, so the v4...

SUSE CVE-2026-68210

In the Linux kernel, the following vulnerability has been resolved: media: stm32: dcmi: unregister notifier on probe failure dcmigraphinit registers the async notifier before dcmiprobe toggles the reset line. If resetcontrolassert or resetcontroldeassert fails afterwards, probe returns through...

CVE-2026-19163

A flaw was found in the Media component of Google Chrome. This use-after-free vulnerability could allow a remote attacker, who has already compromised the renderer process, to potentially escape the browser's sandbox. This could be achieved by enticing a user to visit a specially crafted HTML pag...

CVE-2026-19171

A flaw was found in chromium-browser. This use-after-free vulnerability in the Media component allows a remote attacker to potentially escape the browser's security sandbox. Exploitation can occur by enticing a user to visit a specially crafted HTML page...

OPENSUSE-SU-2026:11505-1 jetty-annotations-9.4.58-5.1 on GA media

These are all security issues fixed in the jetty-annotations-9.4.58-5.1 package on the GA media of openSUSE Tumbleweed...

CVE-2026-15039

creationtimestamp| type| source ---|---|--- 2026-08-12 20:20:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3msvxc222lj2e...

CVE-2026-67285

creationtimestamp| type| source ---|---|--- 2026-08-12 14:30:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3msvdq7tpqe27 2026-08-12 15:42:55+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/ddmpzgp7axc2j...

Linux Distros Unpatched Vulnerability : CVE-2026-68228

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - media: chips-media: wave5: Move srcbuf Removal to finishencode During encoder processing, there is a case where the IRQ response could return the buffer back to...

Linux Distros Unpatched Vulnerability : CVE-2026-68224

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - media: mali-c55: Fix possible ERRPTR in enablestreams The mediapadremotepadunique function returns either a valid pointer or an ERRPTR on failure -ENOTUNIQ if...

Linux Distros Unpatched Vulnerability : CVE-2026-68219

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - media: nxp: imx8-isi: Fix potential out-of-bounds issues The maximum downscaling factor supported by ISI can be up to 16. Add minimum value constraint before...

CVE-2026-66147

creationtimestamp| type| source ---|---|--- 2026-08-11 23:30:06+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mstrgwb6cj2g 2026-08-12 00:45:39+00:00| seen| https://bsky.app/profile/securityonline.bsky.social/post/3mstvnyyxdd2c 2026-08-12 01:57:31+00:00| seen|...

CVE-2026-68216

A flaw was found in the Linux kernel's pwc media driver. When the startstreaming function fails, it does not properly return queued buffers, leading to a resource leak. This can occur if the USB device is disconnected or if a mutex lock is interrupted. A local attacker could potentially exploit...

CVE-2026-68228

A flaw was found in the Linux kernel's media subsystem, specifically within the wave5 encoder. A local user could exploit a race condition during encoder processing, where a buffer is returned to userspace before being fully removed from the ready queue. This could lead to a corrupted buffer list...

CVE-2026-68213

A flaw was found in the Linux kernel's media subsystem, specifically within the rtl2832sdr driver. When the startstreaming function encounters an error, it fails to properly return buffers that were previously queued. This oversight can lead to a memory leak, potentially resulting in resource...

CVE-2026-68208

A flaw was found in the Linux kernel's media subsystem ti: vpe. An incorrect error check in the vipprobeslice function, specifically when handling memory allocation failures from devmkzalloc, could lead to a denial of service. A local attacker could potentially exploit this to cause system...

Social media platforms crack down on drone factory recruiting game

A video game about drone warfare may look like an unusual cybersecurity story. But cybersecurity isn't only about malware or stolen passwords. Sometimes it's about understanding how online platforms are used to influence decisions, build trust, and persuade people to share personal information or...