CVE-2026-81352 – Web Media Extensions Remote Code Execution Vulnerability
CVSS 8.8
IMPORTANT
Critical - Same Day Deployment
"A malicious media payload could turn routine content handling into remote code execution, putting sensitive data and system integrity at risk."
CVE-2026-81352 is a critical remote code execution vulnerability caused by a heap-based buffer overflow in the Microsoft Windows Codecs Library and affecting Web Media Extensions. An unauthorized attacker can target the vulnerability over a network. Exploitation requires user interaction but does not require attacker privileges. Successful exploitation could result in high impact to confidentiality, integrity, and availability.
Key Details
- Attack Vector
- Network
- Attack Complexity
- Low
- Privileges Required
- None
- User Interaction
- Required
- CWE Classification
- CWE-122
Patch this CVE on all your endpoints in under 5 minutes.
First 200 endpoints are free forever, scale as needed.