CVE-2026-70203 – Windows Media Player Remote Code Execution Vulnerability
CVSS 8.8
IMPORTANT
Critical - Same Day Deployment
“A malicious media file can turn a routine file-open action into remote code execution, putting the confidentiality, integrity, and availability of the affected system at risk.”
CVE-2026-70203 is a critical heap-based buffer overflow vulnerability in Windows Media Player. An unauthorized attacker can attempt exploitation by convincing a user to open a specially crafted media file. Processing that file can cause memory corruption and potentially allow attacker-controlled code to execute on the affected system. The vulnerability is not publicly disclosed and is not reported as exploited.
Key Details
- Attack Vector
- Network
- Attack Complexity
- Low
- Privileges Required
- None
- User Interaction
- Required
- CWE Classification
- CWE-122
Patch this CVE on all your endpoints in under 5 minutes.
First 200 endpoints are free forever, scale as needed.