{"id":"CVE-2026-85814","published":"2026-10-13T19:21:05.980","lastModified":"2026-10-16T19:34:38.030","description":"Heap-based buffer overflow in Microsoft Windows Media Foundation allows an unauthorized attacker to execute code over a network.","cvssScore":9.8,"cvssSeverity":"CRITICAL","cvssVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","cwes":["CWE-122"],"vendors":["microsoft"],"products":["windows 10 1607","windows 10 1809","windows 10 21h2","windows 10 22h2","windows 11 23h2","windows 11 24h2","windows 11 25h2","windows 11 26h1","windows 11 26h2","windows server 2012","windows server 2016","windows server 2019"],"references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85814","tags":["Vendor Advisory","Patch"]}],"exploitRefs":[],"hasPoc":false,"ai":{"summary":"A heap-based buffer overflow in Windows Media Foundation allows remote attackers to execute arbitrary code with high privileges. This vulnerability affects any system that processes media files through the Windows Media Foundation framework.","exploitability":"Exploitation is likely straightforward requiring only a specially crafted media file delivered over the network, with no user interaction needed for initial compromise.","blast_radius":"The impact could be widespread across Windows systems that handle media content, potentially affecting enterprise networks and individual users who process multimedia files from untrusted sources.","remediation":"Deploy Microsoft Security Update KB5068427 immediately, as it contains the fix for this vulnerability in Windows Media Foundation.","detection":"No reliable host or network indicator is derivable from the published description.","tags":["rce","media","windows","network"],"model":"garnet-coder","analyzedAt":"2026-10-14T08:50:31.812Z"}}