CVE-2026-5056
📛 CVE Title
Ubuntu: USN-8285-1 (CVE-2026-5056): GStreamer Good Plugins vulnerability
Description
It was discovered that GStreamer Good Plugins incorrectly handled certain MOV/MP4 media files. A remote attacker could use this issue to cause GStreamer Good Plugins to crash, resulting in a denial of service, or possibly execute arbitrary code.
Overview
- State
- —
- Assigner (CNA)
- —
- CVSS severity
- MEDIUM
- CVSS score
- 5.0 / 10
- CVSS vector
AV:N/AC:L/Au:N/C:C/I:C/A:C- Effective score
- 5.0 / 10 MEDIUM source: CNA overview
- CWE(s)
- —
- Reserved
- —
- Published
- 2026-05-20 00:00 UTC
- Last updated
- —
- Source
- https://www.rapid7.com/db/vulnerabilities/ubuntu-cve-2026-5056/
- Linked Threat
- CVE-2026-5056 — CVE-2026-5056
NVD / KEV / EPSS data refreshed 2026-07-28 15:24 UTC. Re-run the 🛰 Backfill from NVD button above to refresh.
European Union Vulnerability Database ENISA EUVD
ENISA's official EU repository for curated vulnerability intelligence. Carries a separate identifier (EUVD-YYYY-NNNN) and frequently exposes an earlier-published description + CVSS than NVD does.
- EUVD ID
-
EUVD-2026-50497 - Assigner
- zdi
- Published
- Jul 29, 2026, 7:10:33 PM
- Updated
- Jul 30, 2026, 3:55:38 AM
- EUVD base score (CVSS 3.0)
-
7.8 / 10
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H - EUVD-reported EPSS
- 0.4300
- Vendors
- GStreamer
- Products
-
GStreamer (a303670510771b993867ddf62bff3bce0cb988c3)
- Aliases
-
GHSA-w72g-mjg9-9cfg
ENISA description: GStreamer qtdemux Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GStreamer. Interaction with this library is required to exploit this vulnerability but attack vectors may vary depending on the implementation. The specific flaw exists within the parsing of UncompressedFrameConfigBox structures. The issue results from the lack of proper validation of the length of user-supplied data prior to copying it to a fixed-length stack-based buffer. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-29392.
Vendor references (0)
References embedded in the original CVE record by the assigning CNA.
None in the CVE record.
Web references (3)
DuckDuckGo results ranked by threat-intel / vendor advisory domains. Generated by the 🔎 Find references (web) button above — same flow as the Remediations search.
- https://nvd.nist.gov/vuln/detail/CVE-2026-5056 tenable:nvd.nist.gov
- https://attackerkb.com/topics/CVE-2026-5056 rapid7:attackerkb.com
- https://www.cve.org/CVERecord?id=CVE-2026-5056 rapid7:www.cve.org
Remediations (20)
Remediations are stored against the linked Threat row; the list below is deduplicated across both pages.
-
web:blog.qualys.com
May 2026's Patch Tuesday arrives with Microsoft addressing a fresh set of vulnerabilities across its ecosystem, reinforcing the ongoing need for timely patching in an increasingly threat-heavy…
2026-06-05 12:07 UTC -
web:cybersecuritynews.com
Microsoft's May 2026 Patch Tuesday lands with a heavy enterprise focus, fixing 120 vulnerabilities across Windows, Office, Azure, developer tools, and Microsoft 365 apps, including 29 remote code execution (RCE) flaws rated Critical.
2026-06-05 12:07 UTC -
web:msrc.microsoft.com
Security Update Guide - Microsoft Security Response Center
2026-06-05 12:07 UTC -
web:nvd.nist.gov
Official websites use .gov A .gov website belongs to an official government organization in the United States.
2026-06-05 12:07 UTC -
web:patchmypc.com
You can find the production release history below for 2026 . View the 2025 Catalog Release History.
2026-06-05 12:07 UTC -
web:portal.msrc.microsoft.com
The Security Update Guide provides information on the latest Microsoft security updates, helping users understand and address potential vulnerabilities effectively.
2026-06-05 12:07 UTC -
web:thecyberexpress.com
Microsoft has rolled out its May 2026 Patch Tuesday security updates, delivering fixes for approximately 120 vulnerabilities across Windows, Microsoft Office, networking services, and enterprise platforms.
2026-06-05 12:07 UTC -
web:www.oracle.com
This Critical Patch Update contains 481 new security patches across the product families listed below. Please note that an MOS note summarizing the content of this Critical Patch Update and other Oracle Software Security Assurance activities is located at April 2026 Critical Patch Update: Executive Summary and Analysis.
2026-06-05 12:07 UTC -
web:www.rapid7.com
Microsoft is publishing 137 vulnerabilities on May 2026 Patch Tuesday, including critical RCE in Netlogon and the Windows DNS client.
2026-06-05 12:07 UTC -
web:zecurit.com
Get the complete breakdown of Microsoft's June 2026 Patch Tuesday. We analyze the latest security updates and all critical CVEs .
2026-06-05 12:07 UTC -
web:cybersecuritynews.com
Microsoft has officially acknowledged a critical zero-day vulnerability in Microsoft Defender, publicly dubbed "RoguePlanet," and confirmed it is actively developing a security patch to address the flaw.
2026-06-19 02:25 UTC -
web:cybersixt.com
Microsoft disclosed a zero‑day vulnerability in its Defender antivirus engine, tracked as CVE - 2026 -50656, which allows local attackers to gain SYSTEM privileges via a race condition. A public proof‑of‑concept exploit has been released, prompting the company to work on an urgent patch . Users are advised to apply the update once available and monitor Defender for anomalous activity.
2026-06-19 02:25 UTC -
web:denizhalil.com
A defining aspect of CVE - 2026 -50656 is its highly resilient execution context. The exploit functions seamlessly regardless of whether Real-Time Protection is enabled or disabled, and it remains operational even when Microsoft Defender is configured in passive mode alongside a third-party endpoint protection product. The flaw primarily leverages the engine's routine handling of file upload ...
2026-06-19 02:25 UTC -
web:msrc.microsoft.com
Security Update Guide - Microsoft Security Response Center
2026-06-19 02:25 UTC -
web:nvd.nist.gov
An official website of the United States government Here's how you know
2026-06-19 02:25 UTC -
web:www.anavem.com
No patch is available as of June 18, 2026 . Microsoft has confirmed it is actively developing a fix for CVE - 2026 -50656, but no KB article or MSRC advisory has been published yet. Administrators should apply application allowlisting as an interim mitigation while awaiting the official update.
2026-06-19 02:25 UTC -
web:www.apolocybersecurity.com
Microsoft confirmed on 17 June that it is developing a patch for CVE - 2026 -50656, the Microsoft Defender engine zero-day dubbed RoguePlanet that allows a local attacker to obtain SYSTEM privileges on fully patched Windows 10 and 11 via a race condition. The PoC is public. No patch is available. The three previous zero-days from the same researcher have already been exploited in real attacks.
2026-06-19 02:25 UTC -
web:www.helpnetsecurity.com
Microsoft has acknowledged the elevation of privilege Microsoft Defender bug ( CVE - 2026 -50656) triggered via the "RoguePlanet" exploit.
2026-06-19 02:25 UTC -
web:www.linkedin.com
Microsoft has confirmed that it is developing a security update to address a newly disclosed zero-day vulnerability in Microsoft Defender, following the public release of exploit code that ...
2026-06-19 02:25 UTC -
web:www.malwarebytes.com
Microsoft says it's working on a fix for an unpatched Defender vulnerability that can give attackers the highest level of access on Windows.
2026-06-19 02:25 UTC
AI Forensic Analysis
Only Available for Registered Users. Sign in to view.