{"id":"CVE-2026-108400","published":"2026-10-13T19:18:05.300","lastModified":"2026-10-13T23:17:30.400","description":"Integer overflow or wraparound in Microsoft Windows Codecs Library allows an unauthorized attacker to execute code over a network.","cvssScore":8.8,"cvssSeverity":"HIGH","cvssVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cwes":["CWE-190"],"vendors":[],"products":[],"references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-108400","tags":[]}],"exploitRefs":[],"hasPoc":false,"ai":{"summary":"A vulnerability in Microsoft Windows Codecs Library allows attackers to execute arbitrary code remotely through integer overflow or wraparound conditions. This represents a significant security risk as it enables remote code execution without authentication.","exploitability":"Exploitation is moderately difficult requiring a network-based attack vector with specific input data that triggers the integer overflow, but no user interaction is needed once the vulnerable system is targeted.","blast_radius":"The impact could be widespread across Windows systems that use the affected codecs library, potentially allowing attackers to gain full system control on any vulnerable machine processing media files.","remediation":"Apply the Microsoft Windows Update KB5042819 or later patch to address this vulnerability.","detection":"No reliable host or network indicator is derivable from the published description.","tags":["rce","media","windows"],"model":"garnet-coder","analyzedAt":"2026-10-17T08:55:01.198Z"}}