Microsoft Windows Media Heap-Based Buffer Overflow Vulnerability Allowing Local Code Execution

A heap-based buffer overflow vulnerability has been identified in Windows Media. This vulnerability allows an authorized attacker to execute code locally. It affects multiple Windows products, including various versions of Windows 10, Windows 11, Windows Server 2019, and Windows Server 2022. The vulnerability arises from a buffer overflow in the Windows Media component, which can be exploited by an authenticated attacker to execute arbitrary code on the affected system.

Impact

Exploitation of this vulnerability could lead to unauthorized code execution on the affected system.

Remediation

Users can apply the security updates provided by Microsoft to address this vulnerability. These security updates can be downloaded via the Microsoft Update Catalog. For specific update details, refer to the Microsoft Knowledge Base articles KB5055518, KB5055519, KB5055523, KB5055526, KB5055527, KB5055528.