Known Vulnerabilities for Web Media Extensions by Microsoft
Listed below are 1 of the newest known vulnerabilities associated with "Web Media Extensions" by "Microsoft".
These CVEs are retrieved based on exact matches on listed software, hardware, and vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed software information are still displayed.
Data on known vulnerable versions is also displayed based on information from known CPEs
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-61457 json | The Grav API plugin (getgrav/grav-plugin-api) before 1.0.3 contains a file upload extension bypass in the API media controlle... | Not Provided | 2026-07-15 | 2026-07-15 |
| CVE-2026-50023 json | yt-dlp is a command-line audio/video downloader. Prior to 2026.06.09, a vulnerability exists in yt-dlp that allows a remote a... | Not Provided | 2026-06-23 | 2026-06-25 |
| CVE-2026-48557 json | Spatie Laravel Media Library before version 11.23.0 contains a file upload restriction bypass in FileAdder::defaultSanitizer(... | Not Provided | 2026-05-29 | 2026-07-14 |
| CVE-2026-41938 json | Vvveb before version 1.0.8.2 contains an unrestricted file upload vulnerability in the media upload handler that allows authe... | Not Provided | 2026-05-06 | 2026-05-06 |
| CVE-2026-34429 json | Vvveb prior to 1.0.8.1 contains a stored cross-site scripting vulnerability that allows authenticated users with media uploa... | Not Provided | 2026-04-20 | 2026-07-14 |
| CVE-2026-6257 json | Vvveb CMS prior to v1.0.8.2 contains a remote code execution vulnerability in its media management functionality where a miss... | Not Provided | 2026-04-20 | 2026-05-06 |
| CVE-2021-28465 json | Web Media Extensions Remote Code Execution Vulnerability | 7.8 - HIGH | 2021-05-11 | 2023-08-02 |