CVE-2026-57090 Microsoft Windows Media Foundation Remote Code Execution Vulnerability

...

CVE-2026-57090 Microsoft Windows Media Foundation Remote Code Execution Vulnerability

...

CVE-2026-57083

CVE-2026-57083 : A vulnerability in the Windows Codecs Library (Windows Media Photo Codec) arises from use of an uninitialized resource, enabling a local attacker to disclose information. Documented impact is local information disclosure with a CVSS 3.1/5.5 (Local, Privileges NONE, User Interacti...

CVE-2026-57083 Windows Media Photo Codec Information Disclosure Vulnerability

...

CVE-2026-57083 Windows Media Photo Codec Information Disclosure Vulnerability

...

CVE-2026-56189 Microsoft Windows Media Foundation Remote Code Execution Vulnerability

...

CVE-2026-56189

CVE-2026-56189 is a local, heap-based buffer overflow in Microsoft Windows Media Foundation. The affected component is Windows Media Foundation within Windows, and the vulnerability allows an unauthenticated local attacker to execute arbitrary code. The root cause is a heap-based overflow in the ...

CVE-2026-56189 Microsoft Windows Media Foundation Remote Code Execution Vulnerability

...

CVE-2026-50677

CVE-2026-50677 is a Windows Media use-after-free vulnerability that enables an authorized, local attacker to elevate privileges. Affected: Windows Media components; root cause: use-after-free in the Windows Media stack. Impact: local privilege escalation (CVSS 3.1/3.1 7.8 HIGH). Mitigation: apply...

CVE-2026-50677 Windows Media Elevation of Privilege Vulnerability

...

CVE-2026-50677 Windows Media Elevation of Privilege Vulnerability

...

CVE-2026-50676

CVE-2026-50676 describes a race condition in Windows Media where concurrent access to a shared resource allows an authorized local attacker to elevate privileges. The initial description and multiple connected sources confirm the vulnerability context and the local, privilege-escalation impact. P...

CVE-2026-50676 Windows Media Elevation of Privilege Vulnerability

...

CVE-2026-50676 Windows Media Elevation of Privilege Vulnerability

...

CVE-2026-50655

CVE-2026-50655 is a Windows Media/Media Foundation heap-based buffer overflow that allows local code execution by a non-privileged attacker with user interaction. It has concrete details in multiple connected sources: exploitation status on CIRCL (exploited in the wild), and Microsoft/MSRC entrie...

CVE-2026-50655 Microsoft Windows Media Foundation Remote Code Execution Vulnerability

...

CVE-2026-50655 Microsoft Windows Media Foundation Remote Code Execution Vulnerability

...

CVE-2026-50415 Windows Media Information Disclosure Vulnerability

...

CVE-2026-50394 Windows Media Information Disclosure Vulnerability

...

CVE-2026-50394

CVE-2026-50394 is an information-disclosure vulnerability affecting Windows Media, enabling a locally-initiated disclosure of sensitive data to an authorized attacker. The incident is categorized as a local access issue with a CVSS v3.1 score of 5.5 (Medium) and a Confidentiality impact of High; ...