7.8
High
CVE-2026-58600 Heap-based buffer overflow in Microsoft Windows Codecs Library allows an unauthorized attacker to elevate privileges…
Description
Heap-based buffer overflow in Microsoft Windows Codecs Library allows an unauthorized attacker to elevate privileges locally.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| HEVC Video Extensions 1.0 | 1.0.0 → < 2.4.87.0 | 2.4.87.0 |
| HEVC Video Extensions for Licensed Applications 2.0 | 2.0.0.0 → < 2.4.85.0 | 2.4.85.0 |
| HEVC Video Extensions from Device Manufacturer 2.0 | 2.0.0.0 → < 2.4.86.0 | 2.4.86.0 |
References
- HEVC Video Extensions Elevation of Privilege Vulnerability msrc.microsoft.com
Timeline
- Published
- Last modified
Other CVEs of HEVC Video Extensions
The 45 CVEs of HEVC Video Extensions →
CVE-2026-108400
Integer overflow or wraparound in Microsoft Windows Codecs Library allows an unauthorized attacker to execute code…
8.8
High
CVE-2026-58599
Heap-based buffer overflow in Microsoft Windows Codecs Library allows an unauthorized attacker to execute code locally
7.8
High
CVE-2023-38170
HEVC Video Extensions Remote Code Execution Vulnerability
7.8
High
CVE-2022-30188
HEVC Video Extensions Remote Code Execution Vulnerability
7.8
High