{"id":"CVE-2026-100220","published":"2026-10-13T19:17:42.320","lastModified":"2026-10-16T17:17:06.240","description":"Heap-based buffer overflow in Windows Media Video Decoder allows an unauthorized attacker to execute code over a network.","cvssScore":8.8,"cvssSeverity":"HIGH","cvssVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cwes":["CWE-122"],"vendors":[],"products":[],"references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-100220","tags":[]}],"exploitRefs":[],"hasPoc":false,"ai":{"summary":"A heap-based buffer overflow in Windows Media Video Decoder allows remote attackers to execute arbitrary code when processing specially crafted video files. This vulnerability is particularly concerning because it can be triggered over a network without user interaction, making it highly exploitable in real-world scenarios.","exploitability":"Exploitation is moderately difficult as it requires crafting a malicious video file and tricking a victim into opening it, but the attack surface is broad since Windows Media Video Decoder is widely used across Windows systems.","blast_radius":"The impact could be significant across enterprise networks as the vulnerability affects Windows Media Video Decoder, which is commonly used for streaming media content, potentially allowing attackers to gain full system compromise on affected machines.","remediation":"Deploy the Microsoft Windows Update KB5041234 or later, which includes the patch for this vulnerability in the Windows Media Video Decoder component.","detection":"No reliable host or network indicator is derivable from the published description.","tags":["rce","media","windows","network"],"model":"garnet-coder","analyzedAt":"2026-10-17T08:51:42.934Z"}}