CVE-2022-29119
HighCVSS 7.8Exploitation Probability (EPSS)
High risk83th percentile - higher than 83% of all known CVEs
Summary
Remote Code Execution vulnerability in Microsoft HEVC Video Extensions. The NVD description does not provide technical details of the vulnerability mechanism.
Risk Assessment
Potential arbitrary code execution in the context of a user opening a crafted video file, which may lead to workstation compromise.
Recommendation
Install the Microsoft security update for HEVC Video Extensions delivered via the Microsoft Store or Windows Update.
Other vulnerabilities in HEVC Video Extensions
See all- CVE-2021-26902High
Remote code execution vulnerability in HEVC Video Extensions. An attacker could exploit this vulnerability to execute arbitrary code on the system.
- CVE-2023-38170High
The vulnerability in HEVC Video Extensions allows for remote code execution. An attacker can exploit this flaw to gain control over the victim's system.
- CVE-2022-22018High
HEVC Video Extensions contains a remote code execution vulnerability.
- CVE-2021-38661High
Remote code execution vulnerability in HEVC Video Extensions. An attacker could exploit this flaw to execute code on the victim's system.
- CVE-2021-33778High
Remote code execution vulnerability in HEVC Video Extensions. An attacker could exploit this flaw to execute code on the victim's system.
- CVE-2021-33777High
Remote code execution vulnerability in HEVC Video Extensions. An attacker could exploit this flaw to execute code on the victim's system.
- CVE-2021-33776High
Remote code execution vulnerability in HEVC Video Extensions. An attacker could exploit this flaw to execute code on the victim's system.
- CVE-2021-33775High
Remote code execution vulnerability in HEVC Video Extensions. An attacker could exploit this flaw to execute code on the victim's system.
- CVE-2021-31947High
Remote code execution vulnerability in HEVC Video Extensions. An attacker could exploit it to execute code on the victim's system.
- CVE-2021-27062High
Remote code execution vulnerability in HEVC Video Extensions. An attacker could exploit it to run code on the affected system.
Original NVD description (English source)
HEVC Video Extensions Remote Code Execution Vulnerability
Vulnerability data from NVD (NIST) · CISA KEV · EPSS