Vulnerabilities & Exploits
Debian Fixes GStreamer RIFF Parser Integer Overflow Debian released updates to gst-plugins-base1.0 to fix an integer overflow in GStreamer's RIFF parser. A malformed media file may trigger denial of service or potentially enable arbitrary code execution when opened.
1 source · Mar 18
NVD KEV
Known exploited · CISA KEV
CVSS 8.8 HIGH: out of bounds write in Skia in Google Chrome prior to 146.0.7680.75 allowed a remote attacker to perform out of bounds memory access via a crafted HTML page. EPSS 33% (97th percentile). Microsoft patch: Release Notes.
CISA federal remediation date Mar 27
NVD KEV
Known exploited · CISA KEV
CVSS 8.8 HIGH: inappropriate implementation in V8 in Google Chrome prior to 146.0.7680.75 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. EPSS 23% (96th percentile). Microsoft patch: Release Notes.
CISA federal remediation date Mar 27
Timeline Sources Mar 18 Debian Security Advisories
SECURITY] [DSA 6168-1] freetype security update
SECURITY] [DSA 6168-1] freetype security update -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 - Debian Security Advisory DSA-6168-1 security@debian.org https://www.debian.org/security/ Moritz Muehlenhoff March 18, 2026 https://www.debian.org/security/faq - Package : freetype…
original Mar 17 Debian Security Advisories
SECURITY] [DSA 6166-1] nodejs security update
SECURITY] [DSA 6166-1] nodejs security update -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 - Debian Security Advisory DSA-6166-1 security@debian.org https://www.debian.org/security/ Moritz Muehlenhoff March 17, 2026 https://www.debian.org/security/faq - Package : nodejs CVE ID…
original Mar 17 Debian Security Advisories
SECURITY] [DSA 6167-1] gst-plugins-base1.0 security update
SECURITY] [DSA 6167-1] gst-plugins-base1.0 security update -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 - Debian Security Advisory DSA-6167-1 security@debian.org https://www.debian.org/security/ Moritz Muehlenhoff March 17, 2026 https://www.debian.org/security/faq - Package…
original Part of the PlainSec briefing for 2026-03-24
Every edition of this story: Debian Fixes GStreamer RIFF Parser Integer Overflow
More from today Vulnerabilities & Exploits
Debian Fixes GStreamer RIFF Parser Integer Overflow Debian released updates to gst-plugins-base1.0 to fix an integer overflow in GStreamer's RIFF parser. A malformed media file may trigger denial of service or potentially enable arbitrary code execution when opened.
1 source · Mar 18
NVD KEV
Known exploited · CISA KEV
CVSS 8.8 HIGH: out of bounds write in Skia in Google Chrome prior to 146.0.7680.75 allowed a remote attacker to perform out of bounds memory access via a crafted HTML page. EPSS 33% (97th percentile). Microsoft patch: Release Notes.
CISA federal remediation date Mar 27
NVD KEV
Known exploited · CISA KEV
CVSS 8.8 HIGH: inappropriate implementation in V8 in Google Chrome prior to 146.0.7680.75 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. EPSS 23% (96th percentile). Microsoft patch: Release Notes.
CISA federal remediation date Mar 27
Timeline Sources Mar 18 Debian Security Advisories
SECURITY] [DSA 6168-1] freetype security update
SECURITY] [DSA 6168-1] freetype security update -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 - Debian Security Advisory DSA-6168-1 security@debian.org https://www.debian.org/security/ Moritz Muehlenhoff March 18, 2026 https://www.debian.org/security/faq - Package : freetype…
original Mar 17 Debian Security Advisories
SECURITY] [DSA 6166-1] nodejs security update
SECURITY] [DSA 6166-1] nodejs security update -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 - Debian Security Advisory DSA-6166-1 security@debian.org https://www.debian.org/security/ Moritz Muehlenhoff March 17, 2026 https://www.debian.org/security/faq - Package : nodejs CVE ID…
original Mar 17 Debian Security Advisories
SECURITY] [DSA 6167-1] gst-plugins-base1.0 security update
SECURITY] [DSA 6167-1] gst-plugins-base1.0 security update -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 - Debian Security Advisory DSA-6167-1 security@debian.org https://www.debian.org/security/ Moritz Muehlenhoff March 17, 2026 https://www.debian.org/security/faq - Package…
original Part of the PlainSec briefing for 2026-03-24
Every edition of this story: Debian Fixes GStreamer RIFF Parser Integer Overflow
More from today