‹ Back to list

CVE-2026-114164

High (8.8)—
Schedule the patchSeverity High 8.8. No public exploit or active exploitation known.
Vendor advisory· Microsoft MSRC
Severity8.8High · CVSS 3.1
Exploitation probability0.87 %higher than 59% of CVEs · score from Nov 11, 2026
Active exploitationNonot in the CISA catalog · checked Nov 12, 03:00 AM
Public exploitNot knownno public code found

News and reports on Orbitaley

Integer underflow (wrap or wraparound) in Microsoft Windows Codecs Library allows an unauthorized attacker to execute code over a network.

Timeline

Built from our own data: NVD, CISA KEV and other exploitation catalogues, FIRST EPSS, public exploits, specialised media and Orbitaley coverage.

  1. CVE record published in NVD
  2. Alert: Microsoft fixes 200 vulnerabilities, including an Outlook flaw CISA confirms is being exploited

ATT&CK techniques

How this vulnerability is exploited and what the attacker gains, in MITRE ATT&CK terms.

El vector CVSS tiene UI:R, lo que fija T1203 (ejecución en cliente). La descripción indica ejecución de código por red sin intérprete concreto, por lo que T1059 genérico.

Inferred by our analysis agent from the official description, CVSS vector and CWE, and checked by a supervisor. May contain errors.

ATT&CK mitigations that cover these techniques

Restrict Web-Based ContentPrivileged Account ManagementLimit Software InstallationExecution PreventionBehavior Prevention on EndpointDisable or Remove Feature or Program

Affected technologies (1)

⚠ AI-inferred from the description — NVD hasn't analyzed this CVE yet, these aren't verified CPEs.

Microsoft — Windows Codecs LibraryAI

NVD record

NVD status
Awaiting Analysis
Published
Nov 10, 2026
Last modified
Nov 10, 2026
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Weakness (CWE)
CWE-191

References

Raw JSON (NVD)

Show
{
  "id": "CVE-2026-114164",
  "cveTags": [],
  "metrics": {
    "ssvcV203": [
      {
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "ssvcData": {
          "id": "CVE-2026-114164",
          "role": "CISA Coordinator",
          "options": [
            {
              "exploitation": "none"
            },
            {
              "automatable": "no"
            },
            {
              "technicalImpact": "total"
            }
          ],
          "version": "2.0.3",
          "timestamp": "2026-11-10T20:01:39.527582Z"
        }
      }
    ],
    "cvssMetricV31": [
      {
        "type": "Secondary",
        "source": "secure@microsoft.com",
        "cvssData": {
          "scope": "UNCHANGED",
          "version": "3.1",
          "baseScore": 8.8,
          "attackVector": "NETWORK",
          "baseSeverity": "HIGH",
          "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
          "integrityImpact": "HIGH",
          "userInteraction": "REQUIRED",
          "attackComplexity": "LOW",
          "availabilityImpact": "HIGH",
          "privilegesRequired": "NONE",
          "confidentialityImpact": "HIGH"
        },
        "impactScore": 5.9,
        "exploitabilityScore": 2.8
      }
    ]
  },
  "affected": [
    {
      "source": "secure@microsoft.com",
      "affectedData": [
        {
          "vendor": "Microsoft",
          "product": "HEVC Video Extensions",
          "versions": [
            {
              "status": "affected",
              "version": "1.0.0",
              "lessThan": "2.4.151.0",
              "versionType": "custom"
            }
          ],
          "platforms": [
            "Windows 10 version 1809",
            "Windows 10 version 21H2",
            "Windows 10 version 22H2",
            "Windows 11 version 23H2",
            "Windows 11 version 24H2",
            "Windows 11 version 25H2",
            "Windows 11 version 26H1",
            "Windows 11 version 26H2"
          ]
        },
        {
          "vendor": "Microsoft",
          "product": "HEVC Video Extensions for Licensed Applications",
          "versions": [
            {
              "status": "affected",
              "version": "2.0.0.0",
              "lessThan": "2.4.150.0",
              "versionType": "custom"
            }
          ],
          "platforms": [
            "Windows 10 version 1809",
            "Windows 10 version 21H2",
            "Windows 10 version 22H2",
            "Windows 11 version 23H2",
            "Windows 11 version 24H2",
            "Windows 11 version 25H2",
            "Windows 11 version 26H1",
            "Windows 11 version 26H2"
          ]
        },
        {
          "vendor": "Microsoft",
          "product": "HEVC Video Extensions from Device Manufacturer",
          "versions": [
            {
              "status": "affected",
              "version": "2.0.0.0",
              "lessThan": "2.4.149.0",
              "versionType": "custom"
            }
          ],
          "platforms": [
            "Windows 10 version 1809",
            "Windows 10 version 21H2",
            "Windows 10 version 22H2",
            "Windows 11 version 23H2",
            "Windows 11 version 24H2",
            "Windows 11 version 25H2",
            "Windows 11 version 26H1",
            "Windows 11 version 26H2"
          ]
        }
      ]
    }
  ],
  "published": "2026-11-10T19:19:09.963",
  "references": [
    {
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-114164",
      "source": "secure@microsoft.com"
    }
  ],
  "vulnStatus": "Awaiting Analysis",
  "weaknesses": [
    {
      "type": "Secondary",
      "source": "secure@microsoft.com",
      "description": [
        {
          "lang": "en",
          "value": "CWE-191"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "Integer underflow (wrap or wraparound) in Microsoft Windows Codecs Library allows an unauthorized attacker to execute code over a network."
    }
  ],
  "lastModified": "2026-11-10T20:18:02.617",
  "sourceIdentifier": "secure@microsoft.com"
}