CVE-2026-58600

CVE-2026-58600 is a heap-based buffer overflow in the HEVC Video Extensions component of the Microsoft Windows Codecs Library . An unauthorized attacker with local access can leverage this flaw to elevate privileges , achieving high impact on confidentiality, integrity, and availability (CVSS 3.1...

CVE-2026-58599

CVE-2026-58599 is a heap-based buffer overflow in the HEVC Video Extensions component of the Microsoft Windows Codecs Library , allowing an unauthorized attacker to achieve local code execution . The CVSS 3.1 score is 7.8 (HIGH) with a vector of AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H, meaning exploi...