EUVD-2026-73710
GHSA-xxw2-g7v2-38j6
Severity by source
AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Network-delivered media file triggers heap overflow with no auth; UI:R reflects mandatory user file-open interaction; full C/I/A reflects code execution in user context.
Primary rating from Vendor (microsoft).
CVSS VectorVendor: microsoft
Lifecycle Timeline
3DescriptionCVE.org
Heap-based buffer overflow in Microsoft Windows Media Foundation allows an unauthorized attacker to execute code over a network.
AnalysisAI
Heap-based buffer overflow in Windows Media Foundation enables network-delivered remote code execution across virtually all supported Windows versions when a user opens a crafted media file. The CVSS:3.1 vector (AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) reflects low-complexity exploitation requiring no privileges but necessitating user interaction - the classic pattern of a malicious media file delivered via email, web, or file share. …
Unlock full vulnerability intelligence
- Risk assessment & exploitation conditions
- Attack chain visualization
- Remediation with exact patch versions
- Threat intelligence from 22 sources
- Personal watchlist & email alerts
Free forever · No credit card required
Attack ChainAIDerived
Hypothetical attack flow derived from CVE metadata
Vulnerability AssessmentAI
| Exploitation | Exploitation requires user interaction: the target must open, preview, or cause Windows Media Foundation to process a malicious media file. … Additional conditions and limiting factors are described in the full assessment. |
| Risk Assessment | CVSS 8.8 accurately reflects a high-severity, broadly exposed attack surface. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in. |
| Exploit Scenario | Full exploit scenario with step-by-step reproduction available after sign-in. |
| Remediation | Apply the Microsoft security update immediately via Windows Update, WSUS, or Microsoft Update Catalog targeting the specific build thresholds listed per Windows version (e.g., Windows 10 22H2 must reach build 10.0.19045.7725 or later; Windows Server 2025 must reach 10.0.26100.33438 or later). … Detailed patch versions, workarounds, and compensating controls in full report. |
Recommended ActionAI
Within 24 hours, verify patch availability from Microsoft for Windows 10 (all versions 1607-26H2), Windows 11 (all versions), and Windows Server 2012 through 2025, then stage in your testing environment. …
Sign in for detailed remediation steps and compensating controls.
Threat intelligence, references, and detailed analysis are available after sign-in.
Same weakness CWE-122 – Heap-based Buffer Overflow
View allSame technique Buffer Overflow
View allShare
External POC / Exploit Code
Leaving vuln.today