https://vulnerability.circl.lu Contains only the most 10 recent sightings. http://www.rssboard.org/rss-specification python-feedgen en Sat, 12 Sep 2026 23:52:12 +0000 https://vulnerability.circl.lu/sighting/18cbf73d-2f9c-494e-89ae-59238602a263/export {"uuid": "18cbf73d-2f9c-494e-89ae-59238602a263", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-73324", "type": "seen", "source": "https://bsky.app/profile/thecybersecguru.com/post/3mvdlartmbz2c", "content": "VLC Media Player hit by two critical security flaws: heap corruption and memory disclosure putting millions at\u00a0risk\n\nTwo critical VLC Media Player vulnerabilities, CVE-2026-56711 and CVE-2026-73324,\u2026\n\nhttps://thecybersecguru.com/news/vlc-media-player-vulnerabilities-cve-2026-56711-cve-2026-73324/", "creation_timestamp": "2026-09-12T17:12:17.490283Z"} {"uuid": "18cbf73d-2f9c-494e-89ae-59238602a263", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-73324", "type": "seen", "source": "https://bsky.app/profile/thecybersecguru.com/post/3mvdlartmbz2c", "content": "VLC Media Player hit by two critical security flaws: heap corruption and memory disclosure putting millions at\u00a0risk\n\nTwo critical VLC Media Player vulnerabilities, CVE-2026-56711 and CVE-2026-73324,\u2026\n\nhttps://thecybersecguru.com/news/vlc-media-player-vulnerabilities-cve-2026-56711-cve-2026-73324/", "creation_timestamp": "2026-09-12T17:12:17.490283Z"} https://vulnerability.circl.lu/sighting/18cbf73d-2f9c-494e-89ae-59238602a263/export Sat, 12 Sep 2026 17:12:17 +0000 https://vulnerability.circl.lu/sighting/fd1f3767-4625-419d-b4be-a7a3b3c11dde/export {"uuid": "fd1f3767-4625-419d-b4be-a7a3b3c11dde", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-73324", "type": "seen", "source": "https://bsky.app/profile/newsfacts.bsky.social/post/3mvddw256cp2y", "content": "Twee ernstige beveiligingslekken ontdekt in populaire VLC Media Player.\n\nTwee nieuwe beveiligingskwetsbaarheden, aangeduid als CVE-2026-56711 en CVE-2026-73324, zijn op 9 september 2026 openbaar gemaakt in VLC Media Player. De ontdekkingen werden gedaan door Fabian Wahle van Hap Sec...", "creation_timestamp": "2026-09-12T15:01:02.235256Z"} {"uuid": "fd1f3767-4625-419d-b4be-a7a3b3c11dde", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-73324", "type": "seen", "source": "https://bsky.app/profile/newsfacts.bsky.social/post/3mvddw256cp2y", "content": "Twee ernstige beveiligingslekken ontdekt in populaire VLC Media Player.\n\nTwee nieuwe beveiligingskwetsbaarheden, aangeduid als CVE-2026-56711 en CVE-2026-73324, zijn op 9 september 2026 openbaar gemaakt in VLC Media Player. De ontdekkingen werden gedaan door Fabian Wahle van Hap Sec...", "creation_timestamp": "2026-09-12T15:01:02.235256Z"} https://vulnerability.circl.lu/sighting/fd1f3767-4625-419d-b4be-a7a3b3c11dde/export Sat, 12 Sep 2026 15:01:02 +0000 https://vulnerability.circl.lu/sighting/b65467eb-3105-46b3-8c1a-c4e4a413c345/export {"uuid": "b65467eb-3105-46b3-8c1a-c4e4a413c345", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-73324", "type": "seen", "source": "https://bsky.app/profile/volk149.bsky.social/post/3mvazhf4ctc2n", "content": "VLC\u30e1\u30c7\u30a3\u30a2\u30d7\u30ec\u30a4\u30e4\u30fc\u306b\nCVE-2026-56711(8.6)\u3001CVE-2026-73324(6.9)\u306e\n\u8106\u5f31\u6027\u544a\u77e5\u3067\u3066\u308b\u306e\u304b\u3002\n\u305d\u3057\u3066\u3053\u308c\u3089\u3078\u306e\u5bfe\u5fdc\u306f\u307e\u3060\u30a2\u30c3\u30d7\u30c7\u30fc\u30c8\u51fa\u3066\u306a\u3044\u3068\n\nhttps://nvd.nist.gov/vuln/detail/cve-2026-56711\nhttps://nvd.nist.gov/vuln/detail/cve-2026-73324", "creation_timestamp": "2026-09-11T16:48:32.168161Z"} {"uuid": "b65467eb-3105-46b3-8c1a-c4e4a413c345", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-73324", "type": "seen", "source": "https://bsky.app/profile/volk149.bsky.social/post/3mvazhf4ctc2n", "content": "VLC\u30e1\u30c7\u30a3\u30a2\u30d7\u30ec\u30a4\u30e4\u30fc\u306b\nCVE-2026-56711(8.6)\u3001CVE-2026-73324(6.9)\u306e\n\u8106\u5f31\u6027\u544a\u77e5\u3067\u3066\u308b\u306e\u304b\u3002\n\u305d\u3057\u3066\u3053\u308c\u3089\u3078\u306e\u5bfe\u5fdc\u306f\u307e\u3060\u30a2\u30c3\u30d7\u30c7\u30fc\u30c8\u51fa\u3066\u306a\u3044\u3068\n\nhttps://nvd.nist.gov/vuln/detail/cve-2026-56711\nhttps://nvd.nist.gov/vuln/detail/cve-2026-73324", "creation_timestamp": "2026-09-11T16:48:32.168161Z"} https://vulnerability.circl.lu/sighting/b65467eb-3105-46b3-8c1a-c4e4a413c345/export Fri, 11 Sep 2026 16:48:32 +0000 https://vulnerability.circl.lu/sighting/f5ec4e7e-9fe1-4e81-b0e3-04b7f4f91989/export {"uuid": "f5ec4e7e-9fe1-4e81-b0e3-04b7f4f91989", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-73324", "type": "seen", "source": "https://infosec.exchange/users/DarkWebInformer/statuses/117253383601050445", "content": "\ud83d\udea8 Two VLC Media Player flaws can allow code execution and leak sensitive memory\nSecurity researchers have disclosed two vulnerabilities affecting VLC Media Player versions 3.0.0 through 3.0.23.\u2800CVE-2026-56711, rated 8.6, is a heap out-of-bounds write caused by an integer overflow in VLC's picture buffer allocation.\nAn attacker can craft a malicious PNG with manipulated dimensions that causes VLC to allocate an undersized memory buffer before writing beyond its boundaries.\nThe flaw can potentially lead to arbitrary code execution when the malicious image is opened directly or loaded through a playlist.\u2800CVE-2026-73324, rated 6.9, affects VLC's RealRTSP handling.\nA malicious RTSP server can send an oversized response that causes VLC to read beyond an allocated buffer and return adjacent heap memory to the attacker, potentially exposing sensitive information.\u2800The vulnerable RealRTSP component is enabled in official VideoLAN builds, although some Linux distribution packages may compile VLC without it.\u2800As of September 11, VLC 3.0.23 remains the current stable desktop release listed by VideoLAN and is affected by both vulnerabilities.\nUsers should avoid opening untrusted image files or RealRTSP playlist links until an updated release addressing the flaws becomes available.\nSource: https://securityonline.info/vlc-media-player-vulnerabilities/", "creation_timestamp": "2026-09-11T16:37:28.044797Z"} {"uuid": "f5ec4e7e-9fe1-4e81-b0e3-04b7f4f91989", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-73324", "type": "seen", "source": "https://infosec.exchange/users/DarkWebInformer/statuses/117253383601050445", "content": "\ud83d\udea8 Two VLC Media Player flaws can allow code execution and leak sensitive memory\nSecurity researchers have disclosed two vulnerabilities affecting VLC Media Player versions 3.0.0 through 3.0.23.\u2800CVE-2026-56711, rated 8.6, is a heap out-of-bounds write caused by an integer overflow in VLC's picture buffer allocation.\nAn attacker can craft a malicious PNG with manipulated dimensions that causes VLC to allocate an undersized memory buffer before writing beyond its boundaries.\nThe flaw can potentially lead to arbitrary code execution when the malicious image is opened directly or loaded through a playlist.\u2800CVE-2026-73324, rated 6.9, affects VLC's RealRTSP handling.\nA malicious RTSP server can send an oversized response that causes VLC to read beyond an allocated buffer and return adjacent heap memory to the attacker, potentially exposing sensitive information.\u2800The vulnerable RealRTSP component is enabled in official VideoLAN builds, although some Linux distribution packages may compile VLC without it.\u2800As of September 11, VLC 3.0.23 remains the current stable desktop release listed by VideoLAN and is affected by both vulnerabilities.\nUsers should avoid opening untrusted image files or RealRTSP playlist links until an updated release addressing the flaws becomes available.\nSource: https://securityonline.info/vlc-media-player-vulnerabilities/", "creation_timestamp": "2026-09-11T16:37:28.044797Z"} https://vulnerability.circl.lu/sighting/f5ec4e7e-9fe1-4e81-b0e3-04b7f4f91989/export Fri, 11 Sep 2026 16:37:28 +0000 https://vulnerability.circl.lu/sighting/4dfe7dda-5e15-4162-ac92-646caf7eaa52/export {"uuid": "4dfe7dda-5e15-4162-ac92-646caf7eaa52", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-73324", "type": "seen", "source": "https://bsky.app/profile/securityonline.bsky.social/post/3mva6x6vu5v2q", "content": "Two VLC media player vulnerabilities (CVE-2026-56711, CVE-2026-73324) allow heap out-of-bounds write and read. No patch is available yet.\n\n#VLC #VideoLAN #VLCvulnerability #CVE #HeapOverflow #MediaPlayer #InfoSec #IntegerOverflow #RTSP #PatchNow", "creation_timestamp": "2026-09-11T08:54:11.349337Z"} {"uuid": "4dfe7dda-5e15-4162-ac92-646caf7eaa52", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-73324", "type": "seen", "source": "https://bsky.app/profile/securityonline.bsky.social/post/3mva6x6vu5v2q", "content": "Two VLC media player vulnerabilities (CVE-2026-56711, CVE-2026-73324) allow heap out-of-bounds write and read. No patch is available yet.\n\n#VLC #VideoLAN #VLCvulnerability #CVE #HeapOverflow #MediaPlayer #InfoSec #IntegerOverflow #RTSP #PatchNow", "creation_timestamp": "2026-09-11T08:54:11.349337Z"} https://vulnerability.circl.lu/sighting/4dfe7dda-5e15-4162-ac92-646caf7eaa52/export Fri, 11 Sep 2026 08:54:11 +0000