Windows Media Foundation Security Vulnerabilities and Issues — Windows Media Foundation CVE List

cve

CVE-2023-36710

Windows Media Foundation Core Remote Code Execution...

7.8CVSS

8.7AI Score

0.001EPSS

2023-10-10 06:15 PM

326

cve

CVE-2022-29105

Microsoft Windows Media Foundation Remote Code Execution...

7.8CVSS

7.7AI Score

0.005EPSS

2022-05-10 09:15 PM

65

4

cve

CVE-2022-21977

Media Foundation Information Disclosure...

3.3CVSS

5.5AI Score

0.001EPSS

2022-03-09 05:15 PM

215

cve

CVE-2022-22010

Media Foundation Information Disclosure...

4.4CVSS

5.5AI Score

0.001EPSS

2022-03-09 05:15 PM

169

cve

CVE-2021-42276

Microsoft Windows Media Foundation Remote Code Execution...

7.8CVSS

7.5AI Score

0.055EPSS

2021-11-10 01:19 AM

73

cve

CVE-2021-41330

Microsoft Windows Media Foundation Remote Code Execution...

7.8CVSS

7.4AI Score

0.068EPSS

2021-10-13 01:15 AM

75

cve

CVE-2021-40462

Windows Media Foundation Dolby Digital Atmos Decoders Remote Code Execution...

7.8CVSS

7.4AI Score

0.068EPSS

2021-10-13 01:15 AM

91

cve

CVE-2021-34439

Microsoft Windows Media Foundation Remote Code Execution...

7.8CVSS

8.1AI Score

0.106EPSS

2021-07-16 09:15 PM

104

6

cve

CVE-2021-34441

Microsoft Windows Media Foundation Remote Code Execution...

7.8CVSS

8.1AI Score

0.106EPSS

2021-07-16 09:15 PM

102

5

cve

CVE-2021-34503

Microsoft Windows Media Foundation Remote Code Execution...

7.8CVSS

8.1AI Score

0.106EPSS

2021-07-14 06:15 PM

79

11

cve

CVE-2021-33760

Media Foundation Information Disclosure...

5.5CVSS

6.4AI Score

0.0004EPSS

2021-07-14 06:15 PM

71

4

cve

CVE-2021-31192

Windows Media Foundation Core Remote Code Execution...

7.8CVSS

8.8AI Score

0.101EPSS

2021-05-11 07:15 PM

83

5

cve

CVE-2021-26881

Microsoft Windows Media Foundation Remote Code Execution...

7.5CVSS

8.5AI Score

0.01EPSS

2021-03-11 04:15 PM

59

3

cve

CVE-2021-1710

Microsoft Windows Media Foundation Remote Code Execution...

7.8CVSS

8.1AI Score

0.011EPSS

2021-01-12 08:15 PM

70

1

cve

CVE-2020-16915

A memory corruption vulnerability exists when Windows Media Foundation improperly handles objects in memory. An attacker who successfully exploited the vulnerability could install programs; view, change, or delete data; or create new accounts with full user rights. There are multiple ways an...

7.8CVSS

8.1AI Score

0.002EPSS

2020-10-16 11:15 PM

65

cve

CVE-2020-1554

A memory corruption vulnerability exists when Windows Media Foundation improperly handles objects in memory. An attacker who successfully exploited the vulnerability could install programs; view, change, or delete data; or create new accounts with full user rights. There are multiple ways an...

7.8CVSS

8AI Score

0.012EPSS

2020-08-17 07:15 PM

90

cve

CVE-2020-1525

A memory corruption vulnerability exists when Windows Media Foundation improperly handles objects in memory. An attacker who successfully exploited the vulnerability could install programs; view, change, or delete data; or create new accounts with full user rights. There are multiple ways an...

7.8CVSS

8.1AI Score

0.001EPSS

2020-08-17 07:15 PM

94

cve

CVE-2020-1492

A memory corruption vulnerability exists when Windows Media Foundation improperly handles objects in memory. An attacker who successfully exploited the vulnerability could install programs; view, change, or delete data; or create new accounts with full user rights. There are multiple ways an...

7.8CVSS

7.7AI Score

0.002EPSS

2020-08-17 07:15 PM

119

cve

CVE-2020-1478

A memory corruption vulnerability exists when Windows Media Foundation improperly handles objects in memory. An attacker who successfully exploited the vulnerability could install programs; view, change, or delete data; or create new accounts with full user rights. There are multiple ways an...

7.8CVSS

8AI Score

0.001EPSS

2020-08-17 07:15 PM

87

cve

CVE-2020-1487

An information disclosure vulnerability exists when Media Foundation improperly handles objects in memory. An attacker who successfully exploited this vulnerability could obtain information to further compromise the user’s system. To exploit this vulnerability, an attacker would have to log onto...

7.8CVSS

7.1AI Score

0.001EPSS

2020-08-17 07:15 PM

96

cve

CVE-2020-1477

A memory corruption vulnerability exists when Windows Media Foundation improperly handles objects in memory. An attacker who successfully exploited the vulnerability could install programs; view, change, or delete data; or create new accounts with full user rights. There are multiple ways an...

7CVSS

7.6AI Score

0.001EPSS

2020-08-17 07:15 PM

105

cve

CVE-2020-1379

A memory corruption vulnerability exists when Windows Media Foundation improperly handles objects in memory. An attacker who successfully exploited the vulnerability could install programs; view, change, or delete data; or create new accounts with full user rights. There are multiple ways an...

5.5CVSS

6.8AI Score

0.001EPSS

2020-08-17 07:15 PM

94

cve

CVE-2020-1239

A memory corruption vulnerability exists when Windows Media Foundation improperly handles objects in memory, aka 'Media Foundation Memory Corruption Vulnerability'. This CVE ID is unique from...

8.8CVSS

8.3AI Score

0.02EPSS

2020-06-09 08:15 PM

100

cve

CVE-2020-1238

A memory corruption vulnerability exists when Windows Media Foundation improperly handles objects in memory, aka 'Media Foundation Memory Corruption Vulnerability'. This CVE ID is unique from...

8.8CVSS

8.3AI Score

0.02EPSS

2020-06-09 08:15 PM

62

cve

CVE-2020-1232

An information disclosure vulnerability exists when Media Foundation improperly handles objects in memory, aka 'Media Foundation Information Disclosure...

6.5CVSS

6.7AI Score

0.116EPSS

2020-06-09 08:15 PM

69

cve

CVE-2020-1136

A memory corruption vulnerability exists when Windows Media Foundation improperly handles objects in memory, aka 'Media Foundation Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2020-1028, CVE-2020-1126,...

7.8CVSS

8.1AI Score

0.044EPSS

2020-05-21 11:15 PM

70

cve

CVE-2020-1150

A memory corruption vulnerability exists when Windows Media Foundation improperly handles objects in memory, aka 'Media Foundation Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2020-1028, CVE-2020-1126,...

7.8CVSS

8.1AI Score

0.044EPSS

2020-05-21 11:15 PM

55

cve

CVE-2020-1126

A memory corruption vulnerability exists when Windows Media Foundation improperly handles objects in memory, aka 'Media Foundation Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2020-1028, CVE-2020-1136,...

8.8CVSS

8.1AI Score

0.044EPSS

2020-05-21 11:15 PM

55

cve

CVE-2020-1028

A memory corruption vulnerability exists when Windows Media Foundation improperly handles objects in memory, aka 'Media Foundation Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2020-1126, CVE-2020-1136,...

7.8CVSS

8.1AI Score

0.044EPSS

2020-05-21 11:15 PM

60

cve

CVE-2020-0948

A memory corruption vulnerability exists when Windows Media Foundation improperly handles objects in memory, aka 'Media Foundation Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2020-0949,...

8.8CVSS

8.7AI Score

0.54EPSS

2020-04-15 03:15 PM

66

cve

CVE-2020-0950

A memory corruption vulnerability exists when Windows Media Foundation improperly handles objects in memory, aka 'Media Foundation Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2020-0948,...

8.8CVSS

8.7AI Score

0.54EPSS

2020-04-15 03:15 PM

63

cve

CVE-2020-0949

A memory corruption vulnerability exists when Windows Media Foundation improperly handles objects in memory, aka 'Media Foundation Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2020-0948,...

8.8CVSS

8.7AI Score

0.54EPSS

2020-04-15 03:15 PM

76

cve

CVE-2020-0947

An information disclosure vulnerability exists when Media Foundation improperly handles objects in memory, aka 'Media Foundation Information Disclosure Vulnerability'. This CVE ID is unique from CVE-2020-0937, CVE-2020-0939, CVE-2020-0945,...

5.5CVSS

5.6AI Score

0.007EPSS

2020-04-15 03:15 PM

57

cve

CVE-2020-0945

An information disclosure vulnerability exists when Media Foundation improperly handles objects in memory, aka 'Media Foundation Information Disclosure Vulnerability'. This CVE ID is unique from CVE-2020-0937, CVE-2020-0939, CVE-2020-0946,...

5.5CVSS

5.6AI Score

0.007EPSS

2020-04-15 03:15 PM

61

cve

CVE-2020-0939

An information disclosure vulnerability exists when Media Foundation improperly handles objects in memory, aka 'Media Foundation Information Disclosure Vulnerability'. This CVE ID is unique from CVE-2020-0937, CVE-2020-0945, CVE-2020-0946,...

5.5CVSS

5.6AI Score

0.007EPSS

2020-04-15 03:15 PM

61

2

cve

CVE-2020-0937

An information disclosure vulnerability exists when Media Foundation improperly handles objects in memory, aka 'Media Foundation Information Disclosure Vulnerability'. This CVE ID is unique from CVE-2020-0939, CVE-2020-0945, CVE-2020-0946,...

5.5CVSS

5.6AI Score

0.007EPSS

2020-04-15 03:15 PM

58

cve

CVE-2020-0946

An information disclosure vulnerability exists when Media Foundation improperly handles objects in memory, aka 'Media Foundation Information Disclosure Vulnerability'. This CVE ID is unique from CVE-2020-0937, CVE-2020-0939, CVE-2020-0945,...

5.5CVSS

5.6AI Score

0.007EPSS

2020-04-15 03:15 PM

63

cve

CVE-2020-0869

A memory corruption vulnerability exists when Windows Media Foundation improperly handles objects in memory, aka 'Media Foundation Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2020-0801, CVE-2020-0807,...

8.8CVSS

8.7AI Score

0.54EPSS

2020-03-12 04:15 PM

55

cve

CVE-2020-0820

An information disclosure vulnerability exists when Media Foundation improperly handles objects in memory, aka 'Media Foundation Information Disclosure...

5.5CVSS

6.6AI Score

0.0004EPSS

2020-03-12 04:15 PM

47

cve

CVE-2020-0807

A memory corruption vulnerability exists when Windows Media Foundation improperly handles objects in memory, aka 'Media Foundation Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2020-0801, CVE-2020-0809,...

8.8CVSS

8.7AI Score

0.54EPSS

2020-03-12 04:15 PM

66

cve

CVE-2020-0809

A memory corruption vulnerability exists when Windows Media Foundation improperly handles objects in memory, aka 'Media Foundation Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2020-0801, CVE-2020-0807,...

8.8CVSS

8.7AI Score

0.54EPSS

2020-03-12 04:15 PM

61

cve

CVE-2020-0801

A memory corruption vulnerability exists when Windows Media Foundation improperly handles objects in memory, aka 'Media Foundation Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2020-0807, CVE-2020-0809,...

8.8CVSS

8.7AI Score

0.54EPSS

2020-03-12 04:15 PM

57

cve

CVE-2020-0738

A memory corruption vulnerability exists when Windows Media Foundation improperly handles objects in memory, aka 'Media Foundation Memory Corruption...

8.8CVSS

8.6AI Score

0.544EPSS

2020-02-11 10:15 PM

109

cve

CVE-2019-1430

A remote code execution vulnerability exists when Windows Media Foundation improperly parses specially crafted QuickTime media files.An attacker who successfully exploited this vulnerability could gain the same user rights as the local user, aka 'Microsoft Windows Media Foundation Remote Code...

7.8CVSS

8AI Score

0.011EPSS

2019-11-12 07:15 PM

51

cve

CVE-2018-8251

A memory corruption vulnerability exists when Windows Media Foundation improperly handles objects in memory, aka "Media Foundation Memory Corruption Vulnerability." This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2012, Windows 8.1, Windows Server 2016, Windows Server....

7.5CVSS

8AI Score

0.006EPSS

2018-06-14 12:29 PM

127

cve

CVE-2016-7217

Media Foundation in Microsoft Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, and 1607, and Windows Server 2016 allows remote attackers to execute arbitrary code via a crafted web site, aka "Media Foundation Memory Corruption...

8.8CVSS

8.6AI Score

0.533EPSS

2016-11-10 06:59 AM

49

cve

CVE-2009-2498

Microsoft Windows Media Format Runtime 9.0, 9.5, and 11 and Windows Media Services 9.1 and 2008 do not properly parse malformed headers in Advanced Systems Format (ASF) files, which allows remote attackers to execute arbitrary code via a crafted (1) .asf, (2) .wmv, or (3) .wma file, aka "Windows...

7.4AI Score

0.757EPSS

2009-09-08 10:30 PM

52

cve

CVE-2009-2499

Microsoft Windows Media Format Runtime 9.0, 9.5, and 11; and Microsoft Media Foundation on Windows Vista Gold, SP1, and SP2 and Server 2008; allows remote attackers to execute arbitrary code via an MP3 file with crafted metadata that triggers memory corruption, aka "Windows Media Playback Memory...

7.5AI Score

0.963EPSS

2009-09-08 10:30 PM

50