CVE-2026-113749

HighCVSS 7.5/10Last modified Nov 10, 2026

Description

Heap-based buffer overflow in Microsoft Windows Codecs Library allows an unauthorized attacker to execute code over a network.

Metrics

CVSS 3.1 7.5/10CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-122CWE-190

Affected software

Source: the vendor's advisory (CNA). NVD analysis pending.

No affected versions have been published.

Timeline

Published
Nov 10, 2026
Last modified
Nov 10, 2026
NVD status
Awaiting Analysis

Related CVEs from 2026

CVE-2026-113758.8IBM MQ could allow an authenticated attacker to cause a denial of service or potentially execute arbitrary code due to a stack buffer overflCVE-2026-1137507.0Heap-based buffer overflow in Windows Device Inventory allows an authorized attacker to elevate privileges locally.CVE-2026-1137517.0Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Fast FAT Driver allows an authorized CVE-2026-1137527.5Use after free in Windows Print Spooler Components allows an unauthorized attacker to execute code over an adjacent network.CVE-2026-1137538.2Untrusted pointer dereference in Windows Hyper-V allows an authorized attacker to elevate privileges locally.CVE-2026-1137544.7Improper access control in Windows FileCrypt Driver allows an authorized attacker to disclose information locally.CVE-2026-1137557.0Use after free in Windows Filter Manager allows an authorized attacker to elevate privileges locally.CVE-2026-1137565.3Improper access control in Windows FileCrypt Driver allows an authorized attacker to bypass a security feature over a network.CVE-2026-1137575.5Improper access control in Windows FileCrypt Driver allows an authorized attacker to disclose information locally.CVE-2026-1137587.8Out-of-bounds read in Desktop Window Manager allows an authorized attacker to elevate privileges locally.CVE-2026-1137597.8Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally.CVE-2026-113768.8IBM MQ 9.2.0.0 through 9.2.0.44 LTS, 9.3.0.0 through 9.3.0.42 LTS, 9.4.0.0 through 9.4.0.26 LTS, 9.4.0.0 through 9.4.5.1 CD, and 10.0.0.0 th
CVE-2026-113749: High severity, CVSS 7.5 | Vulnix