CVE-2026-72484

A flaw was found in the Linux kernel, specifically within the staging: most: video subsystem. This vulnerability occurs when compregistervideodev attempts to release a videodevice that might have already been freed during a failed device registration. A local attacker could exploit this double fr...

CVE-2026-74437

A flaw was found in the Linux kernel's uvcvideo module, which manages USB Video Class UVC devices. When a UVC camera with asynchronous control is in use, a specific sequence of operations can lead to a deadlock within the kernel. This vulnerability could allow a local attacker to cause a...

CVE-2026-50720: Improper Verification of Cryptographic Signature

The Ingenic T31 SoC boot ROM flash-boot verification path compares only a single 32-bit word of the RSA signature output against a single 32-bit word of the SHA-256 payload digest, rather than compare the full data. This allows an attacker with physical write access to boot media to forge modifie...

The vulnerability of Zoom, a video conferencing software, related to buffer overflow attacks allows attackers to execute arbitrary code.

The vulnerability of Zoom, a video conferencing software, is related to buffer overflow attacks. Exploiting this vulnerability can allow an attacker who operates remotely to execute arbitrary code...

Linux Distros Unpatched Vulnerability : CVE-2026-74967

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Same-origin policy bypass in the Audio/Video: Playback component. This vulnerability was fixed in Firefox 154, Firefox ESR 140.14, Firefox ESR 153.1, Thunderbir...

CVE-2026-74967

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Same-origin policy bypass in the Audio/Video: Playback component...

SUSE CVE-2026-68221

In the Linux kernel, the following vulnerability has been resolved: media: nuvoton: npcm-video: fix memory leaks in probe and remove npcmvideoprobe allocates the npcmvideo structure with kzallocobj but never frees it on any probe error path or in npcmvideoremove, leaking the allocation on every...

CVE-2026-66641

Contributor Cross Site Scripting XSS in Video Conferencing with Zoom = 4.6.8 versions...

CVE-2026-66637

Contributor Cross Site Scripting XSS in Featured Video Plus = 2.3.3 versions...

CVE-2026-66641 WordPress Video Conferencing with Zoom plugin <= 4.6.8 - Cross Site Scripting (XSS) vulnerability

Contributor Cross Site Scripting XSS in Video Conferencing with Zoom = 4.6.8 versions...

EUVD-2026-60926

Contributor Cross Site Scripting XSS in Video Conferencing with Zoom = 4.6.8 versions...

CVE-2026-66641

Contributor Cross Site Scripting XSS in Video Conferencing with Zoom = 4.6.8 versions...

CVE-2026-66641

The WordPress Video Conferencing with Zoom plugin (versions

CVE-2026-66641 WordPress Video Conferencing with Zoom plugin <= 4.6.8 - Cross Site Scripting (XSS) vulnerability

Contributor Cross Site Scripting XSS in Video Conferencing with Zoom = 4.6.8 versions...

CVE-2026-66637

Contributor-level users can inject unsanitized JavaScript into the WordPress Featured Video Plus plugin (versions ≤ 2.3.3), enabling stored XSS that executes in victims' browsers (CVSS 6.5, medium). No fix version or exploit details are provided; monitor the Patchstack advisory for updates.

CVE-2026-66637 WordPress Featured Video Plus plugin <= 2.3.3 - Cross Site Scripting (XSS) vulnerability

Contributor Cross Site Scripting XSS in Featured Video Plus = 2.3.3 versions...

EUVD-2026-60922

Contributor Cross Site Scripting XSS in Featured Video Plus = 2.3.3 versions...

CVE-2026-66637

Contributor Cross Site Scripting XSS in Featured Video Plus = 2.3.3 versions...

CVE-2026-66637 WordPress Featured Video Plus plugin <= 2.3.3 - Cross Site Scripting (XSS) vulnerability

Contributor Cross Site Scripting XSS in Featured Video Plus = 2.3.3 versions...

CVE-2026-74967

Same-origin policy bypass in the Audio/Video: Playback component. This vulnerability was fixed in Firefox 154, Firefox ESR 140.14, Firefox ESR 153.1, Thunderbird 154, Thunderbird 140.14, and Thunderbird 153.1...