EUVD-2026-35587
GHSA-3c3c-r5gv-pf8w
Severity by source
AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Primary rating from NVD.
CVSS VectorNVD
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Lifecycle Timeline
3DescriptionCVE.org
Heap-based buffer overflow in Windows Media allows an unauthorized attacker to execute code locally.
AnalysisAI
Local code execution in Microsoft Windows Media is possible through a heap-based buffer overflow that triggers when a user opens or processes a crafted media file. The flaw (CWE-122) carries a CVSS 7.8 with local attack vector and user interaction required, and no public exploit identified at time of analysis. …
Unlock full vulnerability intelligence
- Risk assessment & exploitation conditions
- Attack chain visualization
- Remediation with exact patch versions
- Threat intelligence from 22 sources
- Personal watchlist & email alerts
Free forever · No credit card required
Attack ChainAIDerived
Hypothetical attack flow derived from CVE metadata
Vulnerability AssessmentAI
| Exploitation | The victim must open or render a maliciously crafted media file using a Windows Media-backed handler - this is the explicit UI:R requirement in the CVSS vector. … Additional conditions and limiting factors are described in the full assessment. |
| Risk Assessment | The CVSS 7.8 vector (AV:L/AC:L/PR:N/UI:R) describes a low-complexity local attack requiring no privileges but requiring user interaction - consistent with a file-open or media-render scenario rather than network-reachable exploitation. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in. |
| Exploit Scenario | An attacker emails a victim a crafted media file (or hosts it on a website the victim is lured to visit) and the victim double-clicks or previews it in a Windows Media-backed handler. Parsing the malformed media stream triggers a heap overflow that corrupts adjacent heap metadata or object pointers, allowing the attacker to execute arbitrary code in the victim's user context. … |
| Remediation | Apply the Microsoft security update referenced in the MSRC advisory at https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-48574 as soon as it is released to your servicing channel; exact fixed build numbers must be obtained from that advisory as they are not included in the provided data (patch available per vendor advisory). … Detailed patch versions, workarounds, and compensating controls in full report. |
Recommended ActionAI
Within 24 hours: Catalog systems with Windows Media enabled; alert users not to open media files from external or unverified sources; evaluate whether Windows Media is essential for business operations. …
Sign in for detailed remediation steps and compensating controls.
Threat intelligence, references, and detailed analysis are available after sign-in.
Share
External POC / Exploit Code
Leaving vuln.today