Two VLC media player vulnerabilities (CVE-2026-56711, CVE-2026-73324) allow heap out-of-bounds write and read. No patch is available yet.
VLC
Microsoft Defender incorrectly isolates VLC plugin caches on Windows 11. Discover how to fix this annoying Microsoft Defender VLC bug and restore playback.
Patchwork APT has launched a new campaign in South Asia, exploiting DLL sideloading and obfuscation to deliver malware that masquerades as VLC media player for deep espionage.
Dropping Elephant is targeting Türkiye's defense industry, particularly missile manufacturers, with weaponized conference lures, VLC DLL sideloading, and custom shellcode for intelligence exfiltration.
Discover the alarming truth about malicious extensions and how they are being used to compromise user's browsers and steal sensitive data.
CVE-2022-41325 is a buffer overflow that resides in the vnc module and can be triggered using a malicious vnc URL.