CVE-2021-34503
HighCVSS 7.8Exploitation Probability (EPSS)
High risk80th percentile - higher than 80% of all known CVEs
Summary
Remote code execution vulnerability in Microsoft Windows Media Foundation. An attacker could exploit this flaw to execute code on the victim's system.
Risk Assessment
Risk of system compromise when a user opens a malicious media file.
Recommendation
Install the latest security update for Windows Media Foundation.
Other vulnerabilities in Microsoft Windows Media Foundation
See all- CVE-2026-56189High
A heap-based buffer overflow in Microsoft Windows Media Foundation allows an unauthorized attacker to execute code locally.
- CVE-2021-42276High
Remote code execution vulnerability in Microsoft Windows Media Foundation. An attacker could exploit it to run arbitrary code on the affected system.
- CVE-2021-34441High
Remote code execution vulnerability in Microsoft Windows Media Foundation. Could allow an attacker to execute code via a specially crafted media file.
Original NVD description (English source)
Microsoft Windows Media Foundation Remote Code Execution Vulnerability

