CVE-2026-62744: CWE-122: Heap-based Buffer Overflow in Microsoft Windows 11 Version 24H2

This vulnerability (CVE-2026-62744) involves a heap-based buffer overflow in the Windows Media Foundation component of Microsoft Windows 11 Version 24H2. An attacker can exploit this flaw remotely without privileges to execute arbitrary code. The affected versions include builds from 10.0.26100.0 up to but not including 10.0.26100.9445, 10.0.26200.0 up to but not including 10.0.26200.9445, 10.0.28000.0 up to but not including 10.0.28000.2954, and 10.0.26100.0 up to but not including 10.0.26100.33438. Microsoft has published an official security update to remediate this vulnerability.

Successful exploitation allows remote code execution with high impact on confidentiality, integrity, and availability. An attacker can run arbitrary code on the affected system without prior authentication, potentially leading to full system compromise.

An official fix is available from Microsoft. Users and administrators should apply the security updates provided by Microsoft for Windows 11 Version 24H2 as detailed in the Microsoft Security Response Center advisory at https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-62744. No additional mitigation steps are required beyond applying the official patch.