Known Vulnerabilities for Vlc Media Player by Videolan
Listed below are 10 of the newest known vulnerabilities associated with "Vlc Media Player" by "Videolan".
These CVEs are retrieved based on exact matches on listed software, hardware, and vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed software information are still displayed.
Data on known vulnerable versions is also displayed based on information from known CPEs
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-120409 json | The All-in-One Video Gallery WordPress plugin before 5.1.1 does not check whether a video is password protected before servi... | Not Provided | 2026-11-09 | 2026-11-09 |
| CVE-2026-119365 json | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in bPlugins Media Player A... | Not Provided | 2026-10-30 | 2026-10-30 |
| CVE-2026-117525 json | The FV Flowplayer Video Player WordPress plugin before 7.5.57.7212 does not escape shortcode attribute values embedded in com... | Not Provided | 2026-11-07 | 2026-11-07 |
| CVE-2026-116612 json | A flaw was found in GStreamer Editing Services (gst-editing-services). A GES project file can embed an arbitrary GStreamer pi... | Not Provided | 2026-10-26 | 2026-10-27 |
| CVE-2026-111161 json | libADLMIDI 1.6.2 through 1.6.2.1 contains an off-by-one stack out-of-bounds write vulnerability in BW_MidiSequencer that allo... | Not Provided | 2026-10-15 | 2026-10-15 |
| CVE-2026-104678 json | The CP Media Player WordPress plugin before 1.3.4 does not perform a capability check on its settings-page handler, allowing... | Not Provided | 2026-10-07 | 2026-10-07 |
| CVE-2026-102875 json | VLC media player before 3.0.24 contains a path traversal vulnerability in the skins2 ThemeLoader that fails to validate membe... | Not Provided | 2026-09-29 | 2026-09-30 |
| CVE-2026-96652 json | Plex Media Server before 1.43.3.10861 allows SSRF via '/player/timeline'. An attacker using any X-Plex-Token value can includ... | Not Provided | 2026-09-23 | 2026-10-21 |
| CVE-2026-96096 json | Heap-based buffer overflow in Windows Media Player allows an unauthorized attacker to execute code over a network. | Not Provided | 2026-10-13 | 2026-10-16 |
| CVE-2026-85346 json | The FV Flowplayer Video Player WordPress plugin before 7.5.56.7212 does not perform authorization or CSRF checks on several o... | Not Provided | 2026-11-05 | 2026-11-06 |
Known Affected Configurations (CPE V2.3)
| Type | Vendor | Product | Version | Update | Edition | Language |
|---|---|---|---|---|---|---|
| Application | Videolan | Vlc Media Player | 3.0.9.2 | |||
| Application | Videolan | Vlc Media Player | 3.0.9.1 | |||
| Application | Videolan | Vlc Media Player | 3.0.9 | |||
| Application | Videolan | Vlc Media Player | 3.0.8 | |||
| Application | Videolan | Vlc Media Player | 3.0.7.1 | |||
| Application | Videolan | Vlc Media Player | 3.0.7 | |||
| Application | Videolan | Vlc Media Player | 3.0.6 | |||
| Application | Videolan | Vlc Media Player | 3.0.5 | |||
| Application | Videolan | Vlc Media Player | 3.0.4 | |||
| Application | Videolan | Vlc Media Player | 3.0.3 | |||
| Application | Videolan | Vlc Media Player | 3.0.2 | |||
| Application | Videolan | Vlc Media Player | 3.0.12.1 | |||
| Application | Videolan | Vlc Media Player | 3.0.12 | |||
| Application | Videolan | Vlc Media Player | 3.0.11 | |||
| Application | Videolan | Vlc Media Player | 3.0.10 | |||
| Application | Videolan | Vlc Media Player | 3.0.1 | |||
| Application | Videolan | Vlc Media Player | 3.0.0 | |||
| Application | Videolan | Vlc Media Player | 2.2.8 | |||
| Application | Videolan | Vlc Media Player | 2.2.7 | |||
| Application | Videolan | Vlc Media Player | 2.2.6 |