Skip to content
Threat Feed
Subscribe

Tag

Signal

2 briefs RSS
medium advisory

Signal RingRTC: Unauthenticated call termination denial-of-service (CVE-2026-113380)

A critical vulnerability in the RingRTC library used by Signal allows a remote peer to block call termination by flooding the Finite State Machine (FSM) event queue, enabling unauthorized extension of audio and video capture.

RingRTC vulnerability denial-of-service signal webrtc
1t 1c
medium advisory

Signal 'Disappearing' Messages Persist in macOS Notification Center

macOS stores Signal message notifications in an unencrypted SQLite database, potentially exposing 'disappearing' messages even after they are deleted from the Signal application.

Signal macos notification privacy credential-access
2r