Executive brief
A security vulnerability exists in Windows Media, the component responsible for playing audio and video files on Windows systems. An attacker could exploit this flaw to gain full control over a user's computer if the user is tricked into opening a specially crafted malicious media file. This could lead to the theft of sensitive data, installation of malware, or a complete system takeover.
Technical details
A heap-based buffer overflow (CWE-122) exists within the Windows Media component. The vulnerability is triggered when the application improperly handles a specially crafted media file, leading to memory corruption. While the attack vector is local, it requires user interaction (UI:R), typically involving a user opening a malicious file provided by the attacker. Successful exploitation allows an unauthenticated attacker to execute arbitrary code with the privileges of the logged-in user, potentially leading to a full system compromise. Microsoft has released information regarding this vulnerability via their Security Update Guide.
Affected products
- Microsoft Windows Media
Timeline
- 2026-06-09: disclosed
- 2026-06-09: advisory