{"id":"CVE-2026-70258","published":"2026-10-13T19:19:44.240","lastModified":"2026-10-16T16:20:48.930","description":"Heap-based buffer overflow in Microsoft Windows Media Foundation allows an unauthorized attacker to execute code over a network.","cvssScore":8.8,"cvssSeverity":"HIGH","cvssVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cwes":["CWE-122","CWE-190"],"vendors":[],"products":[],"references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70258","tags":[]}],"exploitRefs":[],"hasPoc":false,"ai":{"summary":"A heap-based buffer overflow in Windows Media Foundation allows remote attackers to execute arbitrary code when processing media files. This vulnerability could enable attackers to gain full control of affected systems without requiring user interaction.","exploitability":"Exploitation is moderately difficult as it requires a remote attacker to deliver a specially crafted media file that triggers the buffer overflow, but the attack vector is relatively accessible through network-based media delivery.","blast_radius":"If exploited, this vulnerability could allow attackers to execute code on any Windows system running Media Foundation components, potentially affecting thousands of endpoints across enterprise networks.","remediation":"Deploy the Microsoft Security Update KB5042819 immediately, as it contains the fix for this heap-based buffer overflow vulnerability in Windows Media Foundation.","detection":"No reliable host or network indicator is derivable from the published description.","tags":["rce","media","windows"],"model":"garnet-coder","analyzedAt":"2026-10-18T09:56:24.469Z"}}