Microsoft Windows Media Heap-Based Buffer Overflow Vulnerability Allowing Local Code Execution

A heap-based buffer overflow vulnerability has been identified in Windows Media. This vulnerability allows an unauthorized attacker to execute code locally on the affected system. It is present in several Microsoft Windows products, including Windows 10, Windows 11, Windows Server 2019, Windows Server 2022, and Windows Server 2025.

Impact

Exploitation of this vulnerability could lead to unauthorized local code execution on the affected system.

Remediation

Users can apply the security updates provided by Microsoft to address this vulnerability. These security updates can be downloaded via the Microsoft Update Catalog. Specific update details can be found in the Microsoft Knowledge Base articles KB5073724, KB5074109, KB5073450, and KB5073379.