<?xml version="1.0" encoding="UTF-8"?><?xml-stylesheet type="text/xsl" href="../assets/feed.xsl"?><rss version="2.0"><channel><title>PatchTheCVE: webrtc project</title><link>https://patchthecve.com/</link><description>CVEs with upgrade or downgrade fix steps</description><item><title>CVE-2021-28681: Pion WebRTC before 3.0.15 didn&#x27;t properly tear down the DTLS Connection when certificate verification failed</title><link>https://patchthecve.com/cve/CVE-2021-28681.html</link><guid>https://patchthecve.com/cve/CVE-2021-28681.html</guid><pubDate>Wed, 17 Jun 2026 03:46:47 +0000</pubDate><description>MEDIUM 5.3: Pion WebRTC before 3.0.15 didn&#x27;t properly tear down the DTLS Connection when certificate verification failed. The PeerConnectionState was set to failed, but a user could ignore that and continue to use the PeerConnection. )A WebRTC implementation shouldn&#x27;t allow the user to continue if verification </description></item><item><title>CVE-2016-1976: Use-after-free vulnerability in the DesktopDisplayDevice class in the WebRTC implementation in Mozilla Firefox</title><link>https://patchthecve.com/cve/CVE-2016-1976.html</link><guid>https://patchthecve.com/cve/CVE-2016-1976.html</guid><pubDate>Wed, 17 Jun 2026 00:43:00 +0000</pubDate><description>MEDIUM 5.5: Use-after-free vulnerability in the DesktopDisplayDevice class in the WebRTC implementation in Mozilla Firefox before 45.0 on Windows might allow remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors.</description></item><item><title>CVE-2016-1975: Multiple race conditions in dom/media/systemservices/CamerasChild.cpp in the WebRTC implementation in Mozilla </title><link>https://patchthecve.com/cve/CVE-2016-1975.html</link><guid>https://patchthecve.com/cve/CVE-2016-1975.html</guid><pubDate>Wed, 17 Jun 2026 00:43:00 +0000</pubDate><description>MEDIUM 6.3: Multiple race conditions in dom/media/systemservices/CamerasChild.cpp in the WebRTC implementation in Mozilla Firefox before 45.0 on Windows might allow remote attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact via unknown vectors.</description></item></channel></rss>