CVE-2026-20837

Heap-based buffer overflow in Windows Media allows an unauthorized attacker to execute code locally.

Use-after-free vulnerability in Windows Media allows an authorized attacker to elevate privileges locally.

Race condition vulnerability in Windows Media allows an authorized attacker to elevate privileges locally.

Windows Media contains a heap-based buffer overflow vulnerability that allows an unauthorized attacker to execute code locally.

Use-After-Free vulnerability in Windows Media allows an authorized attacker to elevate privileges locally.

An exposure of sensitive information to an unauthorized actor exists in Windows Media. An unauthorized attacker can exploit this to disclose information remotely over the network.

A race condition vulnerability in Windows Media allows an authorized attacker to elevate privileges over the network.

A race condition in Windows Media allows an authorized attacker to elevate privileges locally.

Windows Media has a race condition vulnerability due to concurrent execution using a shared resource, allowing an authorized attacker to elevate privileges over a network.

A vulnerability in Windows Media allows an authorized attacker to disclose sensitive information locally. The issue stems from improper access control to data.