CVE-2026-62744: Microsoft Windows Media Foundation Remote Code Execution Vulnerability
Published Sep 8, 2026
·Updated
Heap-based buffer overflow in Microsoft Windows Media Foundation allows an unauthorized attacker to execute code over a network.
Other sources
Microsoft Windows Media Foundation Remote Code Execution Vulnerability
— Microsoft
Affected Software
15 affected componentsFixes available
Microsoft Windows 11=24H2
10.0.26100.9445
Microsoft Windows 11=26H1
10.0.28000.2954
Microsoft Windows 11=25H2
10.0.26200.9445
Microsoft Windows Server 2025<10.0.26100.33438
10.0.26100.33438
Microsoft Windows 11=26H1
10.0.28000.2954
Microsoft Windows 11=25H2
10.0.26200.9445
Microsoft Windows 11=24H2
10.0.26100.9445
Microsoft Windows Server 2025<10.0.26100.33438
10.0.26100.33438
Microsoft Windows 11 24h2<10.0.26100.9445
Microsoft Windows 11 24h2<10.0.26100.9445
Microsoft Windows 11 25h2<10.0.26200.9445
Microsoft Windows 11 25h2<10.0.26200.9445
Microsoft Windows 11 26h1<10.0.28000.2954
Microsoft Windows 11 26h1<10.0.28000.2954
Microsoft Windows Server 2025<10.0.26100.33438
Remediation
Event History
Sep 8, 2026
CVE Published
via Microsoft·02:00 PM
Data Sourced
via Microsoft·02:00 PM
DescriptionSeverityWeakness
Data Sourced
via Microsoft·02:00 PM
Affected Software
Updated
via Microsoft·02:00 PM
Description
CVE Published
via MITRE·05:10 PM
Data Sourced
via MITRE·05:10 PM
DescriptionSeverity
Data Sourced
via NVD·06:17 PM
RemedyDescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What level of access does an attacker need to exploit this vulnerability?
The attacker does not need prior authorization and can attempt exploitation over a network. Successful exploitation requires user interaction.
2
What is the potential impact of successful exploitation?
Successful exploitation can allow remote code execution. The reported impact includes high confidentiality, integrity, and availability consequences.
3
Which products are identified as affected?
The listed affected software is Microsoft Windows 11 and Microsoft Windows Server 2025.