CVE-2026-57083
MediumCVSS 5.5Exploitation Probability (EPSS)
Low risk40th percentile - higher than 40% of all known CVEs
Summary
Uninitialized resource in Microsoft Windows Codecs Library allows an unauthorized attacker to disclose information locally.
Risk Assessment
An attacker with local access can read sensitive data from the memory of a media processing process.
Recommendation
Install the latest Windows security updates from Microsoft.
Other vulnerabilities in Microsoft Windows Codecs Library
See all- CVE-2026-108400High
Integer overflow or wraparound in Microsoft Windows Codecs Library allows an unauthorized attacker to execute code over a network.
- CVE-2026-102199Medium
Stack-based buffer overflow in Microsoft Windows Codecs Library allows an unauthorized attacker to deny service over a network.
- CVE-2026-81353High
Heap-based buffer overflow in Microsoft Windows Codecs Library allows an unauthorized attacker to execute code locally.
- CVE-2026-81352High
Heap-based buffer overflow in Microsoft Windows Codecs Library allows an unauthorized attacker to execute code over a network.
- CVE-2026-58600High
Heap-based buffer overflow in Microsoft Windows Codecs Library allows an unauthorized attacker to elevate privileges locally.
- CVE-2026-58599High
Heap-based buffer overflow in Microsoft Windows Codecs Library allows an unauthorized attacker to execute code locally.
Original NVD description (English source)
Use of uninitialized resource in Microsoft Windows Codecs Library allows an unauthorized attacker to disclose information locally.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS