{"id":"CVE-2026-96096","published":"2026-10-13T19:21:45.403","lastModified":"2026-10-16T16:22:44.797","description":"Heap-based buffer overflow in Windows Media Player allows an unauthorized attacker to execute code over a network.","cvssScore":9.8,"cvssSeverity":"CRITICAL","cvssVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","cwes":["CWE-122"],"vendors":["microsoft"],"products":["windows 10 1607","windows 10 1809","windows 10 21h2","windows 10 22h2","windows 11 23h2","windows 11 24h2","windows 11 25h2","windows 11 26h1","windows 11 26h2","windows server 2012","windows server 2016","windows server 2019"],"references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96096","tags":["Patch","Vendor Advisory"]}],"exploitRefs":[],"hasPoc":false,"ai":{"summary":"A heap-based buffer overflow in Windows Media Player allows remote attackers to execute arbitrary code on affected systems with minimal privileges. This vulnerability can be exploited over a network without user interaction, making it particularly dangerous for enterprise environments where media players are commonly used.","exploitability":"Exploitation is relatively straightforward as it requires only a network-based attack vector with no user interaction needed, though the attacker must have network access to the target system running Windows Media Player.","blast_radius":"The impact could be severe across enterprise networks since Windows Media Player is widely deployed and the vulnerability allows for remote code execution without user interaction, potentially enabling attackers to compromise entire systems.","remediation":"Disable Windows Media Player functionality or restrict network access to systems running it until a patch is available, as no fixed version has been published in the description.","detection":"No reliable host or network indicator is derivable from the published description.","tags":["rce","media","network"],"model":"garnet-coder","analyzedAt":"2026-10-14T08:51:08.296Z"}}