CVE-2026-56189
HighCVSS 7.8Exploitation Probability (EPSS)
Low risk39th percentile - higher than 39% of all known CVEs
Summary
A heap-based buffer overflow in Microsoft Windows Media Foundation allows an unauthorized attacker to execute code locally.
Risk Assessment
An attacker with local access can execute arbitrary code in the system context, potentially leading to privilege escalation and full system compromise.
Recommendation
Install the latest Windows security updates from Microsoft that address this vulnerability.
Other vulnerabilities in Microsoft Windows Media Foundation
See all- CVE-2021-42276High
Remote code execution vulnerability in Microsoft Windows Media Foundation. An attacker could exploit it to run arbitrary code on the affected system.
- CVE-2021-34441High
Remote code execution vulnerability in Microsoft Windows Media Foundation. Could allow an attacker to execute code via a specially crafted media file.
- CVE-2021-34503High
Remote code execution vulnerability in Microsoft Windows Media Foundation. An attacker could exploit this flaw to execute code on the victim's system.
Original NVD description (English source)
Heap-based buffer overflow in Microsoft Windows Media Foundation allows an unauthorized attacker to execute code locally.