CVE-2026-108400
HighCVSS 8.8Exploitation Probability (EPSS)
Elevated risk56th percentile - higher than 56% of all known CVEs
Summary
Integer overflow or wraparound in Microsoft Windows Codecs Library allows an unauthorized attacker to execute code over a network.
Risk Assessment
An attacker can remotely execute arbitrary code, potentially leading to system takeover and breach of data confidentiality.
Recommendation
Urgently install updates for Microsoft Windows Codecs Library and avoid processing untrusted media files.
Other vulnerabilities in Microsoft Windows Codecs Library
See all- CVE-2026-102199Medium
Stack-based buffer overflow in Microsoft Windows Codecs Library allows an unauthorized attacker to deny service over a network.
- CVE-2026-81353High
Heap-based buffer overflow in Microsoft Windows Codecs Library allows an unauthorized attacker to execute code locally.
- CVE-2026-81352High
Heap-based buffer overflow in Microsoft Windows Codecs Library allows an unauthorized attacker to execute code over a network.
- CVE-2026-58600High
Heap-based buffer overflow in Microsoft Windows Codecs Library allows an unauthorized attacker to elevate privileges locally.
- CVE-2026-58599High
Heap-based buffer overflow in Microsoft Windows Codecs Library allows an unauthorized attacker to execute code locally.
- CVE-2026-57083Medium
Uninitialized resource in Microsoft Windows Codecs Library allows an unauthorized attacker to disclose information locally.
Original NVD description (English source)
Integer overflow or wraparound in Microsoft Windows Codecs Library allows an unauthorized attacker to execute code over a network.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS