Known Vulnerabilities for VLC Media Player by VideoLAN
Listed below are 10 of the newest known vulnerabilities associated with "VLC Media Player" by "VideoLAN".
These CVEs are retrieved based on exact matches on listed software, hardware, and vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed software information are still displayed.
Data on known vulnerable versions is also displayed based on information from known CPEs
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-104678 json | The CP Media Player WordPress plugin before 1.3.4 does not perform a capability check on its settings-page handler, allowing... | Not Provided | 2026-10-07 | 2026-10-07 |
| CVE-2026-102875 json | VLC media player before 3.0.24 contains a path traversal vulnerability in the skins2 ThemeLoader that fails to validate membe... | Not Provided | 2026-09-29 | 2026-09-30 |
| CVE-2026-96652 json | Plex Media Server before 1.43.3.10861 allows SSRF via '/player/timeline'. An attacker using any X-Plex-Token value can includ... | Not Provided | 2026-09-23 | 2026-09-23 |
| CVE-2026-78281 json | Unauthenticated Cross Site Scripting (XSS) in CP Media Player <= 1.3.0 versions. | Not Provided | 2026-08-27 | 2026-08-27 |
| CVE-2026-73324 json | Certain VLC media player builds in versions 3.0.0 through 3.0.23 contain a memory-safety vulnerability reachable when process... | Not Provided | 2026-09-09 | 2026-09-14 |
| CVE-2026-72960 json | Heap-based buffer overflow in Windows Media Player allows an unauthorized attacker to execute code over a network. | Not Provided | 2026-09-08 | 2026-09-21 |
| CVE-2026-70203 json | Heap-based buffer overflow in Windows Media Player allows an unauthorized attacker to execute code over a network. | Not Provided | 2026-09-08 | 2026-09-24 |
| CVE-2026-64823 json | Home Assistant Core before 2026.5.4 contains a cross-site scripting vulnerability in the Shelly integration's async_get_media... | Not Provided | 2026-07-21 | 2026-07-22 |
| CVE-2026-56711 json | VLC media player versions 3.0.0 through 3.0.23 contain a memory-safety vulnerability reachable when processing crafted media.... | Not Provided | 2026-09-09 | 2026-09-18 |
| CVE-2026-36433 json | An issue in Actions Semiconductor Co. Ltd Tool- Media Player Utilities v.4.46 allows a physically proximate attacker execute ... | Not Provided | 2026-09-09 | 2026-09-10 |
Known Affected Configurations (CPE V2.3)
| Type | Vendor | Product | Version | Update | Edition | Language |
|---|---|---|---|---|---|---|
| Application | Videolan | Vlc Media Player | 3.0.9.2 | |||
| Application | Videolan | Vlc Media Player | 3.0.9.1 | |||
| Application | Videolan | Vlc Media Player | 3.0.9 | |||
| Application | Videolan | Vlc Media Player | 3.0.8 | |||
| Application | Videolan | Vlc Media Player | 3.0.7.1 | |||
| Application | Videolan | Vlc Media Player | 3.0.7 | |||
| Application | Videolan | Vlc Media Player | 3.0.6 | |||
| Application | Videolan | Vlc Media Player | 3.0.5 | |||
| Application | Videolan | Vlc Media Player | 3.0.4 | |||
| Application | Videolan | Vlc Media Player | 3.0.3 | |||
| Application | Videolan | Vlc Media Player | 3.0.2 | |||
| Application | Videolan | Vlc Media Player | 3.0.12.1 | |||
| Application | Videolan | Vlc Media Player | 3.0.12 | |||
| Application | Videolan | Vlc Media Player | 3.0.11 | |||
| Application | Videolan | Vlc Media Player | 3.0.10 | |||
| Application | Videolan | Vlc Media Player | 3.0.1 | |||
| Application | Videolan | Vlc Media Player | 3.0.0 | |||
| Application | Videolan | Vlc Media Player | 2.2.8 | |||
| Application | Videolan | Vlc Media Player | 2.2.7 | |||
| Application | Videolan | Vlc Media Player | 2.2.6 |