CVE-2026-81352: CWE-122: Heap-based Buffer Overflow in Microsoft Web Media Extensions

The vulnerability identified as CVE-2026-81352 is a heap-based buffer overflow in Microsoft Windows Codecs Library, specifically affecting the Web Media Extensions product. This flaw enables remote code execution by an unauthorized attacker over a network. The vulnerability affects versions 1.0.0.0 and all versions from 1.0.0.0 up to but not including 1.2.42.0. Microsoft has released an official fix to address this security issue. There are no known exploits in the wild at the time of publication.

Successful exploitation of this vulnerability could allow an attacker to execute arbitrary code remotely with no privileges required and only user interaction needed. This could lead to full compromise of the affected system, including confidentiality, integrity, and availability impacts.

An official fix is available from Microsoft. Users and administrators should apply the security update provided by Microsoft as soon as possible to remediate this vulnerability. Refer to the Microsoft Security Response Center advisory at https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-81352 for detailed patching instructions.