CVE-2026-58599
7.8
Vector
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Exploitability: 1.8 / Impact: 5.9
Source: secure@microsoft.com (Secondary)
Description
Heap-based buffer overflow in Microsoft Windows Codecs Library allows an unauthorized attacker to execute code locally.
Affected (4)
Configuration A
| Vulnerable Software | Affected Versions |
|---|---|
| version < 2.4.87.0 |
Configuration B
| Vulnerable Software | Affected Versions |
|---|---|
| version < 2.4.85.0 |
Configuration C
| Vulnerable Software | Affected Versions |
|---|---|
| version < 2.4.86.0 |
| Running on/with | Platform Versions |
|---|---|
Microsoft Windows 10 1809 | All versions |
Microsoft Windows 10 21h2 | All versions |
Microsoft Windows 10 22h2 | All versions |
Microsoft Windows 11 22h2 | All versions |
Microsoft Windows 11 23h2 | All versions |
Microsoft Windows 11 24h2 | All versions |
Microsoft Windows Server 2019 | All versions |
Microsoft Windows Server 2022 | All versions |
Microsoft Windows Server 2025 | All versions |
Configuration D
| Vulnerable Software | Affected Versions |
|---|---|
| version < 2.5.25.0 |
| Running on/with | Platform Versions |
|---|---|
Microsoft Windows 11 25h2 | All versions |
Microsoft Windows 11 26h1 | All versions |
References (1)
Source: secure@microsoft.com
PatchVendor Advisory
Timeline
No history available yet.