CVE-2026-58599 – HEVC Video Extensions Remote Code Execution Vulnerability
CVSS 7.8
IMPORTANT
Critical - Same Day Deployment
“A memory corruption flaw in HEVC video processing can turn user interaction into an opportunity for an attacker to execute code.”
CVE-2026-58599 is a critical remote code execution vulnerability caused by a heap-based buffer overflow in the Microsoft Windows Codecs Library. An unauthorized attacker can execute code locally by exploiting the flaw. Exploitation requires user interaction, but no privileges are required. Successful exploitation can have a high impact on confidentiality, integrity, and availability.
Key Details
- Attack Vector
- Local
- Attack Complexity
- Low
- Privileges Required
- None
- User Interaction
- Required
- CWE Classification
- CWE-122
Patch this CVE on all your endpoints in under 5 minutes.
First 200 endpoints are free forever, scale as needed.