CVE-2026-72960
HighCVSS 8.8Exploitation Probability (EPSS)
Elevated risk53th percentile - higher than 53% of all known CVEs
Summary
Heap-based buffer overflow in Windows Media Player allows an unauthorized attacker to execute code over a network.
Risk Assessment
A remote attacker could exploit this vulnerability to execute malicious code on the victim's machine, potentially leading to system takeover.
Recommendation
Apply security updates for Windows Media Player and avoid opening untrusted media files.
Other vulnerabilities in Windows Media Player
See all- CVE-2026-96096Critical
A heap-based buffer overflow in Windows Media Player allows an unauthorized attacker to execute code over a network. The vulnerability stems from improper handling of media data.
- CVE-2026-70203High
Heap-based buffer overflow in Windows Media Player allows an unauthorized attacker to execute code over a network.
Original NVD description (English source)
Heap-based buffer overflow in Windows Media Player allows an unauthorized attacker to execute code over a network.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS