CVE-2021-34441
HighCVSS 7.8Exploitation Probability (EPSS)
High risk79th percentile - higher than 79% of all known CVEs
Summary
Remote code execution vulnerability in Microsoft Windows Media Foundation. Could allow an attacker to execute code via a specially crafted media file.
Risk Assessment
User could be infected with malware after opening a malicious video or audio file.
Recommendation
Install Windows security updates.
Other vulnerabilities in Microsoft Windows Media Foundation
See all- CVE-2026-96952High
Heap-based buffer overflow in Microsoft Windows Media Foundation allows an unauthorized attacker to execute code over a network.
- CVE-2026-96186High
A deserialization of untrusted data vulnerability in Microsoft Windows Media Foundation allows an authenticated attacker to elevate privileges locally. The flaw arises from unsafe deserialization of untrusted data.
- CVE-2026-70278High
Heap-based buffer overflow in Microsoft Windows Media Foundation allows an authorized attacker to elevate privileges locally.
- CVE-2026-70258High
Heap-based buffer overflow in Microsoft Windows Media Foundation allows an unauthorized attacker to execute code over a network.
- CVE-2026-85814Critical
Heap-based buffer overflow in Microsoft Windows Media Foundation allows an unauthorized attacker to execute code over a network.
- CVE-2026-83517Critical
Heap-based buffer overflow in Microsoft Windows Media Foundation allows an unauthorized attacker to execute code over a network.
- CVE-2026-69408Critical
Integer overflow or wraparound in Microsoft Windows Media Foundation allows an unauthorized attacker to execute code over a network.
- CVE-2026-69601High
Heap-based buffer overflow in Microsoft Windows Media Foundation allows an unauthorized attacker to execute code over a network.
- CVE-2026-62744High
Heap-based buffer overflow in Microsoft Windows Media Foundation allows an unauthorized attacker to execute code over a network.
- CVE-2026-62706High
Out-of-bounds read in Microsoft Windows Media Foundation allows an unauthorized attacker to execute code over a network.
Original NVD description (English source)
Microsoft Windows Media Foundation Remote Code Execution Vulnerability
Vulnerability data from NVD (NIST) · CISA KEV · EPSS