CVE Catalog
CVE-2026-70343
HighCVSS 8.8Exploitation Probability (EPSS)
Elevated risk0.81%
56th percentile - higher than 56% of all known CVEs
Summary
Heap-based buffer overflow in Microsoft MPEG-2 Video Extension allows an unauthorized attacker to execute code over a network.
Risk Assessment
The vulnerability can be exploited remotely without authentication, risking arbitrary code execution on the victim's device.
Recommendation
Update Microsoft MPEG-2 Video Extension to the latest version and avoid opening untrusted media files.
Other vulnerabilities in Microsoft MPEG-2 Video Extension
Original NVD description (English source)
Heap-based buffer overflow in Microsoft MPEG-2 Video Extension allows an unauthorized attacker to execute code over a network.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS