Microsoft Windows DirectShow Remote Code Execution Vulnerability

A remote code execution vulnerability has been identified in Windows DirectShow. This issue arises from a double-free error, which can be exploited by an authenticated user to control memory allocation and execute arbitrary code remotely. The vulnerability affects multiple Windows versions, including Windows 10, Windows 11, and Windows Server 2022 and 2019.

Impact

Exploitation of this vulnerability allows for remote code execution on the affected system.

Remediation

Users can apply the security updates provided by Microsoft to address this vulnerability. These security updates can be downloaded via the Microsoft Update Catalog. Specific update details can be found in the Microsoft Knowledge Base articles KB5050021, KB5049981, KB5049983, and KB5050008.