Critical Real Player Update
Summary: Real Networks released a new version of RealPlayer that fixes at least seven critical vulnerabilities which could be used to compromise host systems remotely if left unpatched. Real Networks said it had no evidence that attackers were exploiting any of these flaws yet, and the post notes that a commenter citing Secunia counted eleven vulnerabilities, several found by Secunia's own researchers.
What you should know: The flaws could be used to compromise host systems remotely, and the software stays installed on many machines because a handful of sites still stream only in the RealPlayer format - so the exposure sits on systems nobody thinks to patch.
Read the original at Krebs on Security ↗
- Topics
- Supply Chain & AppSec
- Related
- Kitesurf is now open source Cyber Risks · Nov 13, 2026Trained to betray: How post-training supply chain attacks hijack coding agents Cyber Risks · Nov 12, 2026ZDI-26-913: (0Day) Meta fairseq load_audio_path Code Injection Remote Code Execution Vulnerability Cyber Risks · Nov 11, 2026