CVE-2026-62744
HighCVSS 8.8Exploitation Probability (EPSS)
Elevated risk53th percentile - higher than 53% of all known CVEs
Summary
Heap-based buffer overflow in Microsoft Windows Media Foundation allows an unauthorized attacker to execute code over a network.
Risk Assessment
Remote attack could lead to full system compromise, posing a serious threat to data confidentiality and integrity.
Recommendation
Install the latest Windows security updates.
Other vulnerabilities in Microsoft Windows Media Foundation
See all- CVE-2026-85814Critical
Heap-based buffer overflow in Microsoft Windows Media Foundation allows an unauthorized attacker to execute code over a network.
- CVE-2026-83517Critical
Heap-based buffer overflow in Microsoft Windows Media Foundation allows an unauthorized attacker to execute code over a network.
- CVE-2026-69408Critical
Integer overflow or wraparound in Microsoft Windows Media Foundation allows an unauthorized attacker to execute code over a network.
- CVE-2026-96952High
Heap-based buffer overflow in Microsoft Windows Media Foundation allows an unauthorized attacker to execute code over a network.
- CVE-2026-96186High
A deserialization of untrusted data vulnerability in Microsoft Windows Media Foundation allows an authenticated attacker to elevate privileges locally. The flaw arises from unsafe deserialization of untrusted data.
- CVE-2026-70278High
Heap-based buffer overflow in Microsoft Windows Media Foundation allows an authorized attacker to elevate privileges locally.
- CVE-2026-70258High
Heap-based buffer overflow in Microsoft Windows Media Foundation allows an unauthorized attacker to execute code over a network.
- CVE-2026-70131High
Heap-based buffer overflow in Microsoft Windows Media Foundation allows an unauthorized attacker to elevate privileges locally.
- CVE-2026-102201High
Use after free in Microsoft Windows Media Foundation allows an authorized attacker to elevate privileges locally.
- CVE-2026-69601High
Heap-based buffer overflow in Microsoft Windows Media Foundation allows an unauthorized attacker to execute code over a network.
Original NVD description (English source)
Heap-based buffer overflow in Microsoft Windows Media Foundation allows an unauthorized attacker to execute code over a network.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS