CVE-2026-58599

Medienbericht

EPSS 0.33%
Veröffentlicht 08.09.2026 17:16:52
Zuletzt bearbeitet 01.10.2026 16:32:47
Erkennungen
Login

HEVC Video Extensions Remote Code Execution Vulnerability

Heap-based buffer overflow in Microsoft Windows Codecs Library allows an unauthorized attacker to execute code locally.

Betroffene Produkte Warnungen 0 Metriken 2 CWE 1 Referenzen 5

NVD 4 VulnDex Vulnerability Enrichment 1

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Microsoft ≫ Hevc Video Extensions Version < 2.4.87.0

Microsoft ≫ Hevc Video Extensions For Licensed Applications Version < 2.4.85.0

Microsoft ≫ Hevc Video Extensions From Device Manufacturer Version < 2.4.86.0

   Microsoft ≫ Windows 10 1809 HwPlatform x64
   Microsoft ≫ Windows 10 1809 HwPlatform x86
   Microsoft ≫ Windows 10 21h2 HwPlatform arm64
   Microsoft ≫ Windows 10 21h2 HwPlatform x64
   Microsoft ≫ Windows 10 21h2 HwPlatform x86
   Microsoft ≫ Windows 10 22h2 HwPlatform arm64
   Microsoft ≫ Windows 10 22h2 HwPlatform x64
   Microsoft ≫ Windows 10 22h2 HwPlatform x86
   Microsoft ≫ Windows 11 22h2 HwPlatform arm64
   Microsoft ≫ Windows 11 22h2 HwPlatform x64
   Microsoft ≫ Windows 11 23h2 HwPlatform arm64
   Microsoft ≫ Windows 11 23h2 HwPlatform x64
   Microsoft ≫ Windows 11 24h2 HwPlatform arm64
   Microsoft ≫ Windows 11 24h2 HwPlatform x64
   Microsoft ≫ Windows Server 2019 HwPlatform x64
   Microsoft ≫ Windows Server 2022 HwPlatform x64
   Microsoft ≫ Windows Server 2025 HwPlatform x64

Microsoft ≫ Hevc Video Extensions From Device Manufacturer Version < 2.5.25.0

   Microsoft ≫ Windows 11 25h2 HwPlatform arm64
   Microsoft ≫ Windows 11 25h2 HwPlatform x64
   Microsoft ≫ Windows 11 26h1 HwPlatform arm64
   Microsoft ≫ Windows 11 26h1 HwPlatform x64

VulnDex Vulnerability Enrichment

Diese Information steht angemeldeten Benutzern zur Verfügung.

Zu dieser CVE wurde keine Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	0.33%	0.253

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
Microsoft	7.8	1.8	5.9	CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

CWE-122 Heap-based Buffer Overflow

A heap overflow condition is a buffer overflow, where the buffer that can be overwritten is allocated in the heap portion of memory, generally meaning that the buffer was allocated using a routine such as malloc().

Für Zugriff zu Vulnerability Intelligence ist ein VulnDex Zugang erforderlich.

VulnDex Intel

Media Report

08.09.2026 20:38

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-58599

Patch

Vendor Advisory

https://nvd.nist.gov/vuln/detail/CVE-2026-58599

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2026-58599

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2026-58599

EUVD

Team-orientierte Vulnerability Management Plattform

Features der Plattform

CVE-2026-58599