CVE Catalog

CVE-2026-57094

HighCVSS 8.8
Published: Updated: Translated: NVD NIST

Exploitation Probability (EPSS)

Elevated risk
0.81%

53th percentile - higher than 53% of all known CVEs

Summary

Heap-based buffer overflow vulnerability in Windows Media Foundation. An unauthorized attacker can remotely execute code.

Risk Assessment

An attacker can take control of the system, installing malware or stealing data.

Recommendation

Install the security update for Windows Media Foundation from Microsoft.

Other vulnerabilities in Windows Media Foundation

See all
Original NVD description (English source)

Heap-based buffer overflow in Microsoft Windows Media Foundation allows an unauthorized attacker to execute code over a network.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS