https://vulnerability.circl.lu/rss/recent/all/10 Most recent entries from all 2026-10-01T15:16:26.644603+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent entries. https://vulnerability.circl.lu/vuln/alsa-2026:47082 ALSA-2026:47082 — Important: pipewire security update 2026-10-01T15:16:28.129042+00:00

Affected: AlmaLinux:9: pipewire, AlmaLinux:9: pipewire-alsa, AlmaLinux:9: pipewire-devel, AlmaLinux:9: pipewire-gstreamer, AlmaLinux:9: pipewire-jack-audio-connection-kit, AlmaLinux:9: pipewire-jack-audio-connection-kit-devel, AlmaLinux:9: pipewire-jack-audio-connection-kit-libs, AlmaLinux:9: pipewire-libs, AlmaLinux:9: pipewire-module-x11, AlmaLinux:9: pipewire-pulseaudio and 1 more

PipeWire is a multimedia server for Linux and other Unix like operating systems.

Security Fix(es):

* pipewire: PipeWire: Sandbox escape and arbitrary code execution via malicious library loading (CVE-2026-5674)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

 https://vulnerability.circl.lu/vuln/fkie_cve-2026-5674 fkie_cve-2026-5674 2026-10-01T15:16:28.129236+00:00

A flaw was found in PipeWire, a multimedia server. This vulnerability allows an attacker to escape sandboxed applications, such as Flatpak, by exploiting PipeWire's PulseAudio compatibility layer. An attacker with minimal permissions within a sandboxed environment can load a malicious library, leading to arbitrary code execution outside the sandbox and potential compromise of the user's system.

 https://vulnerability.circl.lu/vuln/ghsa-c85p-55wv-w2q5 GHSA-c85p-55wv-w2q5 2026-10-01T15:16:28.129297+00:00

A flaw was found in PipeWire, a multimedia server. This vulnerability allows an attacker to escape sandboxed applications, such as Flatpak, by exploiting PipeWire's PulseAudio compatibility layer. An attacker with minimal permissions within a sandboxed environment can load a malicious library, leading to arbitrary code execution outside the sandbox and potential compromise of the user's system.

 https://vulnerability.circl.lu/vuln/rhsa-2026:47082 RHSA-2026:47082 — security update for pipewire 2026-10-01T15:16:28.129330+00:00

security update for pipewire

 https://vulnerability.circl.lu/vuln/rhsa-2026:51064 RHSA-2026:51064 — Red Hat Security Advisory: pipewire security update 2026-10-01T15:16:28.129362+00:00

pipewire: PipeWire: Sandbox escape and arbitrary code execution via malicious library loading

 https://vulnerability.circl.lu/vuln/rlsa-2026:47082 RLSA-2026:47082 — Important: pipewire security update 2026-10-01T15:16:28.129391+00:00

Affected: Rocky Linux:9: pipewire

PipeWire is a multimedia server for Linux and other Unix like operating systems.

Security Fix(es):

* pipewire: PipeWire: Sandbox escape and arbitrary code execution via malicious library loading (CVE-2026-5674)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

 https://vulnerability.circl.lu/vuln/ubuntu-cve-2026-5674 UBUNTU-CVE-2026-5674 2026-10-01T15:16:28.129433+00:00

Affected: Ubuntu:20.04:LTS: pipewire, Ubuntu:22.04:LTS: pipewire, Ubuntu:24.04:LTS: pipewire, Ubuntu:26.04:LTS: pipewire

A flaw was found in PipeWire, a multimedia server. This vulnerability allows an attacker to escape sandboxed applications, such as Flatpak, by exploiting PipeWire's PulseAudio compatibility layer. An attacker with minimal permissions within a sandboxed environment can load a malicious library, leading to arbitrary code execution outside the sandbox and potential compromise of the user's system.

 https://vulnerability.circl.lu/vuln/wid-sec-w-2026-2553 WID-SEC-W-2026-2553 — Red Hat Enterprise Linux (librest, pipewire): Mehrere Schwachstellen 2026-10-01T15:16:28.129476+00:00

Ein Angreifer kann mehrere Schwachstellen in Red Hat Enterprise Linux ausnutzen, um Sicherheitsvorkehrungen zu umgehen und beliebigen Code auszuführen.