299 matches found
CVE-2026-96952
Heap-based buffer overflow in Microsoft Windows Media Foundation allows an unauthorized attacker to execute code over a network...
CVE-2026-96186
Deserialization of untrusted data in Microsoft Windows Media Foundation allows an authorized attacker to elevate privileges locally...
CVE-2026-85814
Heap-based buffer overflow in Microsoft Windows Media Foundation allows an unauthorized attacker to execute code over a network...
CVE-2026-83517
Heap-based buffer overflow in Microsoft Windows Media Foundation allows an unauthorized attacker to execute code over a network...
CVE-2026-70278
Heap-based buffer overflow in Microsoft Windows Media Foundation allows an authorized attacker to elevate privileges locally...
CVE-2026-70258
Heap-based buffer overflow in Microsoft Windows Media Foundation allows an unauthorized attacker to execute code over a network...
CVE-2026-70131
Heap-based buffer overflow in Microsoft Windows Media Foundation allows an unauthorized attacker to elevate privileges locally...
CVE-2026-70044
Out-of-bounds read in Microsoft Windows Media Foundation allows an unauthorized attacker to disclose information locally...
CVE-2026-102201
Use after free in Microsoft Windows Media Foundation allows an authorized attacker to elevate privileges locally...
CVE-2026-102201
A Use after free vulnerability in Microsoft Windows Media Foundation allows an authorized attacker to achieve local privilege escalation . The vulnerability is classified as HIGH severity with a CVSS 3.1 score of 7.8. Exploitation details and specific affected versions are not provided in the doc...
EUVD-2026-100276
Heap-based buffer overflow in Microsoft Windows Media Foundation allows an unauthorized attacker to execute code over a network...
CVE-2026-96952
A Heap-based buffer overflow vulnerability exists in Microsoft Windows Media Foundation . This flaw could allow an unauthorized attacker to achieve remote code execution over a network. The vulnerability is characterized by a CVSS v3.1 score of 8.8 (High) , indicating significant impacts on confi...
CVE-2026-96186
The Microsoft Windows Media Foundation component is vulnerable to a deserialization of untrusted data flaw (CWE-502). This vulnerability allows an authorized attacker to achieve local privilege elevation . No specific patch versions or exploit links are provided in the documents.
CVE-2026-83517
A heap-based buffer overflow in Microsoft Windows Media Foundation allows an unauthorized attacker to achieve remote code execution over a network. This vulnerability is rated as CRITICAL with a CVSS score of 9.80 , as it enables an attacker to execute arbitrary code without prior authentication ...
CVE-2026-70258
A heap-based buffer overflow exists in Microsoft Windows Media Foundation , which could allow an unauthorized attacker to achieve remote code execution over a network. The vulnerability is associated with CWE-122 (Heap-based Buffer Overflow) and CWE-190 (Integer Overflow or Wraparound). No specif...
CVE-2026-70044
An out-of-bounds read vulnerability exists in Microsoft Windows Media Foundation . This flaw allows an unauthorized attacker to disclose information locally on an affected system. While the specific component or root cause is not detailed beyond the out-of-bounds read, the vulnerability has a MED...
CVE-2026-70131
A heap-based buffer overflow exists in Microsoft Windows Media Foundation . This vulnerability allows an unauthorized attacker to achieve local privilege elevation . While the specific component or file causing the overflow is not detailed in the provided documents, the impact is categorized as H...
CVE-2026-85814
A heap-based buffer overflow exists in Microsoft Windows Media Foundation , which could allow an unauthorized attacker to achieve remote code execution over a network. The vulnerability has a CVSS v3.1 score of 9.8 (CRITICAL), indicating a high impact on confidentiality, integrity, and availabili...
CVE-2026-70278
A Heap-based buffer overflow exists in Microsoft Windows Media Foundation . This vulnerability allows an authorized attacker to achieve local privilege escalation . While the specific component or function is not detailed in the provided documents, the impact is categorized as high for confidenti...
