PatchTheCVEhtml5 video player vulnerabilities and fixes
Recent CVEs affecting html5 video player, with upgrade or downgrade steps. 1 tracked.
Also searched as: html5videoplayer.
html5 video player has 1 tracked vulnerability, 0 critical. A fixed release or vendor patch exists for 0. Most recent: 2026-04-12. Highest priority: CVE-2019-25689 (score 37/100).
- CVE-2019-25689 HIGH 8.4 DOWNGRADE HTML5 Video Player 1.2.5 contains a local buffer overflow vulnerability that allows attackers to execute arbit
FAQ
How do I fix html5 video player vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is html5 video player being exploited right now?
None of the tracked html5 video player CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which html5 video player CVE should I patch first?
CVE-2019-25689 currently ranks highest (37/100): HTML5 Video Player 1.2.5 contains a local buffer overflow vulnerability that allows attackers to execute arbit.