Known Vulnerabilities for VLC Media Player by VideoLAN
Listed below are 10 of the newest known vulnerabilities associated with "VLC Media Player" by "VideoLAN".
These CVEs are retrieved based on exact matches on listed software, hardware, and vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed software information are still displayed.
Data on known vulnerable versions is also displayed based on information from known CPEs
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-78281 json | Unauthenticated Cross Site Scripting (XSS) in CP Media Player <= 1.3.0 versions. | Not Provided | 2026-08-27 | 2026-08-27 |
| CVE-2026-73324 json | VLC media player copies an RTSP response line into a fixed buffer without guaranteeing termination and then treats that buffe... | Not Provided | 2026-09-09 | 2026-09-09 |
| CVE-2026-72960 json | Heap-based buffer overflow in Windows Media Player allows an unauthorized attacker to execute code over a network. | Not Provided | 2026-09-08 | 2026-09-09 |
| CVE-2026-70203 json | Heap-based buffer overflow in Windows Media Player allows an unauthorized attacker to execute code over a network. | Not Provided | 2026-09-08 | 2026-09-09 |
| CVE-2026-64823 json | Home Assistant Core before 2026.5.4 contains a cross-site scripting vulnerability in the Shelly integration's async_get_media... | Not Provided | 2026-07-21 | 2026-07-22 |
| CVE-2026-56711 json | VLC media player computes the size of a picture buffer with 32-bit arithmetic and allocates from the wrapped result. In Alloc... | Not Provided | 2026-09-09 | 2026-09-09 |
| CVE-2026-36433 json | An issue in Actions Semiconductor Co. Ltd Tool- Media Player Utilities v.4.46 allows a physically proximate attacker execute ... | Not Provided | 2026-09-09 | 2026-09-10 |
| CVE-2023-47360 json | Not Provided | 2023-11-07 | 2026-05-28 | |
| CVE-2023-47359 json | Not Provided | 2023-11-07 | 2026-05-28 | |
| CVE-2022-41325 json | An integer overflow in the VNC module in VideoLAN VLC Media Player through 3.0.17.4 allows attackers, by tricking a user into... | 7.8 - HIGH | 2022-12-06 | 2022-12-08 |
Known Affected Configurations (CPE V2.3)
| Type | Vendor | Product | Version | Update | Edition | Language |
|---|---|---|---|---|---|---|
| Application | Videolan | Vlc Media Player | 3.0.9.2 | |||
| Application | Videolan | Vlc Media Player | 3.0.9.1 | |||
| Application | Videolan | Vlc Media Player | 3.0.9 | |||
| Application | Videolan | Vlc Media Player | 3.0.8 | |||
| Application | Videolan | Vlc Media Player | 3.0.7.1 | |||
| Application | Videolan | Vlc Media Player | 3.0.7 | |||
| Application | Videolan | Vlc Media Player | 3.0.6 | |||
| Application | Videolan | Vlc Media Player | 3.0.5 | |||
| Application | Videolan | Vlc Media Player | 3.0.4 | |||
| Application | Videolan | Vlc Media Player | 3.0.3 | |||
| Application | Videolan | Vlc Media Player | 3.0.2 | |||
| Application | Videolan | Vlc Media Player | 3.0.12.1 | |||
| Application | Videolan | Vlc Media Player | 3.0.12 | |||
| Application | Videolan | Vlc Media Player | 3.0.11 | |||
| Application | Videolan | Vlc Media Player | 3.0.10 | |||
| Application | Videolan | Vlc Media Player | 3.0.1 | |||
| Application | Videolan | Vlc Media Player | 3.0.0 | |||
| Application | Videolan | Vlc Media Player | 2.2.8 | |||
| Application | Videolan | Vlc Media Player | 2.2.7 | |||
| Application | Videolan | Vlc Media Player | 2.2.6 |