Out-of-Bounds Read in Windows Media Foundation

Publication date: 2026-09-08

Last updated on: 2026-09-24

Assigner: Microsoft Corporation

Description

Out-of-bounds read in Microsoft Windows Media Foundation allows an unauthorized attacker to execute code over a network.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-09-08

Last Modified

2026-09-24

Generated

2026-09-29

AI Q&A

2026-09-09

EPSS Evaluated

2026-09-27

NVD

CVE-2026-62706

Affected Vendors & Products

Vendor	Product	Version / Range
microsoft	windows_media_foundation	*

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-121	A stack-based buffer overflow condition is a condition where the buffer being overwritten is allocated on the stack (i.e., is a local variable or, rarely, a parameter to a function).
CWE-125	The product reads data past the end, or before the beginning, of the intended buffer.

Attack-Flow Graph

Executive Summary

This is an out-of-bounds read vulnerability in Microsoft Windows Media Foundation. It allows an unauthorized attacker to execute arbitrary code over a network by exploiting improper memory access in the affected component.

Impact Analysis

An attacker could exploit this to run malicious code on your system, potentially leading to data theft, system compromise, or further network attacks. It requires user interaction but can be triggered remotely.

Mitigation Strategies

Apply the latest security updates from Microsoft to patch the Windows Media Foundation vulnerability. Disable unnecessary network-facing services and restrict access to Media Foundation components until patched.

Hi! I’m here to help you understand CVE-2026-62706. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70