Live · 98 sources · updated just now
The Security Standard

A daily wire for defenders: vulnerabilities, advisories, research, standards.

CVE record · 2 sources

CVE-2026-114164

CVSS 8.8

Integer underflow (wrap or wraparound) in Microsoft Windows Codecs Library allows an unauthorized attacker to execute code over a network.

Vendor
Microsoft
Product
HEVC Video Extensions, HEVC Video Extensions for Licensed Applications, HEVC Video Extensions from Device Manufacturer
CVSS v3.1
8.8 AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Weakness
CWE-191
Exposure class
Operating system

Coverage

2

Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.

  1. CVE NVD

    Integer underflow (wrap or wraparound) in Microsoft Windows Codecs Library allows an unauthorized attacker to execute code over a network.

    Integer underflow (wrap or wraparound) in Microsoft Windows Codecs Library allows an unauthorized attacker to execute code over a network.

  2. Advisory MSRC

    HEVC Video Extensions Remote Code Execution Vulnerability

    Integer underflow (wrap or wraparound) in Microsoft Windows Codecs Library allows an unauthorized attacker to execute code over a network.

Keyboard

j / k
Next / previous item
o or Enter
Open the original source
i
Open the item page
s
Save or unsave for later
/
Focus search
g then f v a r n s
Go to front, vulnerabilities, advisories, research, news, standards
t
Toggle theme
?
This help