Skip to content

CVE record · 3 sources

CVE-2026-100220

CVSS 8.8

Heap-based buffer overflow in Windows Media Video Decoder allows an unauthorized attacker to execute code over a network.

Vendor: Microsoft
Product: windows
CVSS: 8.8
EPSS: 0.007 (p52)
Exposure class: Endpoint security

Coverage

3

Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.

32

Talos research Talos 18d ago

Microsoft Patch Tuesday for October 2026 — Snort rules and prominent vulnerabilities

Microsoft has released its monthly security update for October 2026, which includes 1415 vulnerabilities affecting a range of products, including 85 that Microsoft marked as "critical."

Fix available CVE-2026-96951 CVE-2026-70229 CVE-2026-70571+57 more Microsoft Cisco
19

Qualys TRU Qualys 18d ago

Microsoft Patch Tuesday, October 2026 Security Update Review

Microsoft has released its October 2026 Patch Tuesday security updates, addressing vulnerabilities across its products and services. As organizations continue to navigate an evolving threat landscape, applying security patches…

Fix available CVE-2026-96951 CVE-2026-108398 CVE-2026-105016+57 more Microsoft
10

CVE NVD 18d ago

Heap-based buffer overflow in Windows Media Video Decoder allows an unauthorized attacker to execute code over a network.

Heap-based buffer overflow in Windows Media Video Decoder allows an unauthorized attacker to execute code over a network.

CVSS 8.8 CVE-2026-100220 Microsoft