VLC media player

Two VLC Media Player Flaws Expose Heap Memory, No Fix Yet VLC media player vulnerabilities allowing heap out-of-bounds write via crafted PNG and heap out-of-bounds read via malicious RTSP server

VLC media player vulnerabilities allowing heap out-of-bounds write via crafted PNG and heap out-of-bounds read via malicious RTSP server

Two VLC Media Player Flaws Expose Heap Memory, No Fix Yet

Do Son September 11, 2026

TL;DR Two VLC media player vulnerabilities let attackers corrupt or read heap memory. One triggers on a...

VLC Media Player Update Needed: CVE-2024-46461 Discovered CVE-2024-46461 - VLC media player

CVE-2024-46461 - VLC media player

VLC Media Player Update Needed: CVE-2024-46461 Discovered

Do Son September 26, 2024

Users of the popular VLC media player are being urged to update their software immediately following the...

CVE-2023-47359: VLC Media Player Buffer Overflow Vulnerability

CVE-2023-47359

CVE-2023-47359: VLC Media Player Buffer Overflow Vulnerability

Do Son November 13, 2023

VideoLAN has released VLC Media Player 3.0.20 and it is now available for Windows, Mac, and Linux....

VLC media player received patches for zero-day in open-source library VLC vulnerability

VLC vulnerability

VLC media player received patches for zero-day in open-source library

Do Son October 10, 2023

VLC media player is a popular open-source media player that is used by millions of people around...

CVE-2022-41325: VLC media player remote code execution vulnerability

CVE-2022-41325

CVE-2022-41325: VLC media player remote code execution vulnerability

Do Son November 30, 2022

VideoLAN this week released a software update to its highly popular VLC media player to address four...

📧

Email Delivery
Get threat intel straight to your inbox.

♾️

Unlimited Vendors
Track every technology in your stack.

🚨

All New CVE Alerts
Be the first to know about new flaws.

⚙️

Custom EPSS Threshold
Filter noise, focus on real risks.

💬

Slack & Teams Webhook
Integrate directly into your SecOps.

🚫

100% Ad-Free
Enjoy an uninterrupted reading experience.

$7/mo

CVE-2026-94127CVSS 9.8
When a BIG-IP APM access policy and an OAuth profile is configured on a virtual server, specific malicious...
Admin intelCISA KEV📅 Added to KEV: Sep 22, 2026📅 Updated: Sep 22, 2026
CVE-2026-85102CVSS 9.8
Improper certificate trust validation during VPN negotiation in Check Point Quantum Security Gateway may allow an unauthenticated remote...
Admin intelCISA KEV📅 Added to KEV: Sep 22, 2026📅 Updated: Sep 22, 2026
CVE-2026-93616CVSS 9.8
A directory traversal and file upload vulnerability allows an unauthenticated attacker to upload and execute arbitrary scripts on...
Admin intelCISA KEV📅 Added to KEV: Sep 22, 2026📅 Updated: Sep 22, 2026
CVE-2026-93952CVSS 10.0
VeloCloud Orchestrator (VCO) on-prem has a security issue where this issue may allow a remote attacker to access...
Admin intelCISA KEV📅 Added to KEV: Sep 22, 2026📅 Updated: Sep 22, 2026
CVE-2026-32996CVSS 7.3
A vulnerability in Veeam Agent for Microsoft Windows allows for Local Privilege Escalation.
Admin intel📅 Updated: Sep 22, 2026
CVE-2026-7273CVSS 8.8
A stack-based buffer overflow vulnerability in the CGI program of Zyxel GS1900-48HPv2 firmware versions through 2.90(ABTQ.1)C0 could allow a...
CISA KEV📅 Added to KEV: Sep 21, 2026
CVE-2026-58138CVSS 9.8
Orkes Conductor 3.21.21 before 3.30.2 contains an unauthenticated remote code execution vulnerability that allows remote attackers to execute...
Admin intel📅 Updated: Sep 20, 2026
CVE-2026-86124CVSS 9.8
AutoAgent contains an unauthenticated remote code execution vulnerability in the TCP server that binds to all interfaces and...
Admin intel📅 Updated: Sep 19, 2026

CVE-2026-84082CVSS 9.8
IBM Guardium Data Protection 12.2 could allow a remote attacker to execute arbitrary SQL commands due to improper...
📅 Updated: Sep 23, 2026
CVE-2026-84064CVSS 9.9
IBM Guardium Data Protection 12.2 could allow a remote authenticated attacker to execute arbitrary SQL commands due to...
📅 Updated: Sep 23, 2026
CVE-2026-82967CVSS 9.8
IBM Guardium Data Protection 12.2 is vulnerable to an authentication bypass that allows an unauthenticated remote attacker to...
📅 Updated: Sep 23, 2026
CVE-2026-82340CVSS 9.8
IBM Guardium Data Protection 12.2 is vulnerable to unauthenticated insecure deserialization and attacker-controlled reflective method dispatch in the...
📅 Updated: Sep 23, 2026
CVE-2026-82000CVSS 9.6
Adobe Experience Manager Forms JEE is affected by a Server-Side Request Forgery (SSRF) vulnerability that could result in...
📅 Updated: Sep 23, 2026
CVE-2026-81995CVSS 9.1
Adobe Experience Manager Forms JEE is affected by an Improper Input Validation vulnerability that could result in arbitrary...
📅 Updated: Sep 23, 2026
CVE-2026-81657CVSS 9.8
IBM Guardium Data Protection 12.2 could allow a remote unauthenticated attacker to execute arbitrary code on the system...
📅 Updated: Sep 23, 2026
CVE-2026-80442CVSS 9.9
IBM Guardium Data Protection 12.2 is vulnerable to an authenticated OS command injection vulnerability in the exportCertificate functionality....
📅 Updated: Sep 23, 2026