Vulnerabilities
Summary — last 7 days
New vulnerabilities3,517▼ 1,240 vs. last week
Critical / high1,375▼ 1,336 vs. last week
New active exploitation (KEV)13▲ 6 vs. last week
Unscored (no CVSS)692▲ 632 vs. last week
More filters
4 results, sorted by published date (most recent first)
| CVE | Status | Severity | EPSS | Active exploitation | Affected technologies | Published ▼ | Modified | Description |
|---|---|---|---|---|---|---|---|---|
| Awaiting Analysis | Medium (6.5) | 0.21% | — | Gstreamer Project Gst-plugins-uglyAI | 10/19/2026 | 10/19/2026 | A flaw was found in the GStreamer ASF demuxer in gst-plugins-ugly. When parsing a Simple Index object, an attacker-controlled entry count is used to size a heap allocation without being limited to the payload available in the object. Processing a crafted ASF, WMV, or WMA file can cause a very large memory allocation… | |
| Awaiting Analysis | High (7.1) | 0.44% | — | Gstreamer Gst-plugins-uglyAI | 8/10/2026 | 9/16/2026 | Multiple integer overflow and underflow vulnerabilities were found in the GStreamer gst-plugins-ugly ASF demuxer (asfdemux) when parsing header objects from crafted ASF, WMV, or WMA files. Insufficient validation of attacker-controlled length and size values can bypass bounds checks and cause out-of-bounds heap reads.… | |
| Awaiting Analysis | High (7.1) | 0.46% | — | Gstreamer Gst-plugins-uglyAI | 6/15/2026 | 9/8/2026 | A flaw was found in GStreamer's RealMedia demuxer in the gst-plugins-ugly package. When processing a RealMedia file containing a specially crafted FILEINFO metadata section, the demuxer parses variable-name and variable-value pairs using re_skip_pascal_string() without validating that offsets remain within the mapped… | |
| Awaiting Analysis | High (7.1) | 0.46% | — | Gstreamer Gst-plugins-uglyAI | 6/15/2026 | 8/5/2026 | A vulnerability was found in the GStreamer RealMedia demuxer (gst-plugins-ugly). When processing a RealMedia (.rm) file, the demuxer parses MDPR (media properties) chunks to configure audio streams. For audio stream header versions 4 and 5, the parser reads fields such as codec type, packet size, sample rate, channel… |