8.8 HighCWE-190
CVE-2026-56711
VLC media player 3.0.0 through 3.0.23 memory corruption vulnerability
VideoLANVLC media player
Status
- Not in CISA KEV
Exploit probabilityEPSSchecked 25 Oct
0.1%probability of exploitation in the next 30 days
Higher than 1% of scored CVEs
SeverityCVSS
8.8High
Description NVD
VLC media player versions 3.0.0 through 3.0.23 contain a memory-safety vulnerability reachable when processing crafted media. Exploitation requires user interaction and may result in application termination or code execution with the privileges of the VLC process.
Coverage 1 article · 1 outlet
- Unpatched VLC Flaws Let Malicious Media Corrupt or Expose MemorySecurityOnline · first in our coverage