CVE-2026-96096

A heap-based buffer overflow in Windows Media Player allows an unauthorized attacker to execute code over a network. The vulnerability stems from improper handling of media data.

An attacker could remotely execute arbitrary code in the context of the player, potentially leading to compromise of the user's workstation.

Apply the available Microsoft security updates for Windows Media Player and avoid opening untrusted media files.