June 24, 2026
- PixelSmash, a critical RCE in FFmpeg's MagicYUV decoder, lets a crafted media file execute code in any app using libavcodec — RCE on Jellyfin under certain conditions, and DoS in Kodi, Emby, Nextcloud, PhotoPrism, and OBS. Now patched. JFrog, BleepingComputer. · Vulnerabilities & Exploits
in Two Netlogon Flaws Hit Domain Controllers as FortiBleed Lands in Finland