b.s 1

• asked Jul 27

Heap out-of-bounds allows remote code execution when decoding a crafted MagicYUV video in FFmpeg

FFmpeg's MagicYUV decoder in libavcodec contains a heap out-of-bounds write ("PixelSmash", CVE-2026-8461) caused by a mismatch between how frame buffers are allocated and how the decoder computes subsampled chroma-plane heights ...

ffmpeg security

0 votes

1 solutions

12 views

b.s 1

• asked Jul 23

CPU usage may spike to 80-100% when Capability Access Manager Service runs in Windows

The Capability Access Manager Service (camsvc), which governs app permissions to privacy-sensitive capabilities like the camera, microphone, and location, can pin CPU usage between 80 and 100% under "Service Host" in Task Manager wh...

windows-10 windows-11

0 votes

0 solutions

10 views

b.s 1

• asked Jul 22

Unauthenticated attackers achieve remote code execution when chaining two flaws in WordPress core (wp2shell)

Two vulnerabilities in WordPress core can be chained by an unauthenticated attacker to achieve full remote code execution on a default, stock installation with no plugins and no login required — dubbed "wp2shell." A REST API batch-r...

wordpress security

0 votes

1 solutions

25 views

b.s 1

• asked Jul 22

Overheating, battery drain, and unexpected shutdowns occur when installing KB5101650 on certain Dell PCs in Windows 11

The July 14, 2026 Windows 11 security update KB5101650 conflicts with the Intel Innovation Platform Framework (IPF) Processor Participant driver on certain newer Dell devices (Precision, XPS, and Pro Max models with Intel processors), due t...

windows-11

0 votes

1 solutions

13 views

b.s 1

• asked Jul 22

Gemini bypasses PIN and sends SMS when lock screen exploit is triggered in Android

On Android 16 devices with Gemini's lock-screen access enabled, an unauthenticated person with physical access to a locked phone can send SMS messages and access WhatsApp through Gemini without ever entering the device PIN. The bug also...

android

0 votes

0 solutions

16 views

b.s 1

• asked Jul 21

Picture-in-picture fails to appear when backgrounding video playback in YouTube on Android or iOS

YouTube's picture-in-picture (PiP) mode is failing for a growing number of users on both Android and iOS. When users exit the app during video playback, audio continues in the background but the floating video overlay never appears. Bec...

youtube

0 votes

1 solutions

17 views

b.s 1

• asked Jul 20

Fast Laser award fails to unlock when Quick Restart is used during the Kortz Center Heist finale in GTA Online

The Kortz Center Heist's finale includes a "Fast Laser" award, earned by crossing the laser field and interacting with the power box near the vault door within 30 seconds. Community testing found that using the Quick Restart opt...

grand-theft-auto-online

0 votes

0 solutions

12 views

b.s 1

• asked Jul 20

"Read Sample" button is missing when viewing Kindle book listings on Amazon

Severity: Medium (affects a purchase-decision/preview feature across a large number of book listings, but doesn't block purchasing itself and a partial workaround exists) Description: Amazon's "Read Sample" button - which le...

amazon

0 votes

1 solutions

15 views

b.s 1

• asked Jul 20

NPC-piloted Annihilator Stealth crashes during getaway in GTA Online

Severity: Major (could fail an otherwise successful, lengthy multi-stage heist run right at the final step) Description: In the Kortz Center Heist's finale, players could select the Annihilator Stealth, piloted by the NPC character Pern...

grand-theft-auto-online

0 votes

1 solutions

16 views

b.s 1

• asked Jul 17

Health regen is suppressed when Chaos Reshaped is active in Destiny 2

Chaos Reshaped is a weapon perk that, at its second stack, is meant to grant increased damage plus a periodic 35 HP healing burst every 7 seconds. Instead, activating the perk suppresses the game's normal passive health/shield regenerat...

destiny-2

0 votes

0 solutions

16 views