CVE-2026-62744
HighCVSS 8.8Exploitation Probability (EPSS)
Elevated risk53th percentile - higher than 53% of all known CVEs
Summary
Heap-based buffer overflow in Microsoft Windows Media Foundation allows an unauthorized attacker to execute code over a network.
Risk Assessment
Remote attack could lead to full system compromise, posing a serious threat to data confidentiality and integrity.
Recommendation
Install the latest Windows security updates.
Other vulnerabilities in Microsoft Windows Media Foundation
See all- CVE-2026-69408Critical
Integer overflow or wraparound in Microsoft Windows Media Foundation allows an unauthorized attacker to execute code over a network.
- CVE-2026-69601High
Heap-based buffer overflow in Microsoft Windows Media Foundation allows an unauthorized attacker to execute code over a network.
- CVE-2026-62706High
Out-of-bounds read in Microsoft Windows Media Foundation allows an unauthorized attacker to execute code over a network.
- CVE-2026-56189High
A heap-based buffer overflow in Microsoft Windows Media Foundation allows an unauthorized attacker to execute code locally.
- CVE-2021-42276High
Remote code execution vulnerability in Microsoft Windows Media Foundation. An attacker could exploit it to run arbitrary code on the affected system.
- CVE-2021-34441High
Remote code execution vulnerability in Microsoft Windows Media Foundation. Could allow an attacker to execute code via a specially crafted media file.
- CVE-2021-34503High
Remote code execution vulnerability in Microsoft Windows Media Foundation. An attacker could exploit this flaw to execute code on the victim's system.
Original NVD description (English source)
Heap-based buffer overflow in Microsoft Windows Media Foundation allows an unauthorized attacker to execute code over a network.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS