CVE-2026-70343

HighCVSS 8.8/10Last modified Oct 13, 2026

Description

Heap-based buffer overflow in Microsoft MPEG-2 Video Extension allows an unauthorized attacker to execute code over a network.

Metrics

CVSS 3.1 8.8/10CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-122

Affected software

Source: the vendor's advisory (CNA). NVD analysis pending.

No affected versions have been published.

Timeline

Published
Oct 13, 2026
Last modified
Oct 13, 2026
NVD status
Awaiting Analysis

Related CVEs from 2026

CVE-2026-703447.8Stack-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally.CVE-2026-703457.8Heap-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally.CVE-2026-703467.8Stack-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally.CVE-2026-703477.8Heap-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally.CVE-2026-703485.5Improper link resolution before file access ('link following') in Windows Management Services allows an authorized attacker to deny service CVE-2026-70358.8A vulnerability was determined in Tenda FH1202 1.2.0.14. This affects the function fromWrlclientSet of the file /goform/WrlclientSet of the CVE-2026-703518.8Integer overflow or wraparound in Microsoft WebP Image Extension allows an unauthorized attacker to execute code over a network.CVE-2026-7035210.0Missing authentication for critical function in Azure AI Language allows an unauthorized attacker to elevate privileges over a network.CVE-2026-703547.8Out-of-bounds write in .NET allows an unauthorized attacker to execute code locally.CVE-2026-703558.7Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attCVE-2026-703569.1The TMS file upload endpoint fails to enforce server-side file type restrictions, allowing an attacker to upload and execute arbitrary PHP fCVE-2026-703577.5Gitea validates a repository migration hostname against its network allow and block lists before invoking Git, but the Git subprocess indepe
CVE-2026-70343: High severity, CVSS 8.8 | Vulnix