Heap-based Buffer Overflow in Microsoft Windows Codecs Library Affects Microsoft
CVE-2026-113749

7.5HIGH

Key Information:

Vendor

Microsoft
Status
Microsoft Office For Android
Windows 10 Version 1607
Windows 10 Version 1809
Windows 10 Version 21h2
Vendor
CVE Published:
10 November 2026

What is CVE-2026-113749?

A heap-based buffer overflow vulnerability in the Microsoft Windows Codecs Library can allow an unauthorized attacker to execute code remotely over a network. This flaw may expose systems to significant risks if left unpatched. Microsoft recommends users apply security updates to mitigate these risks and protect their systems from unauthorized access.

Affected Version(s)

Microsoft Office for Android 16.0.1 < 16.0.20625.20014

Windows 10 Version 1607 32-bit Systems 10.0.14393.0 < 10.0.14393.9688

Windows 10 Version 1809 32-bit Systems 10.0.17763.0 < 10.0.17763.9487

References

https://msrc.microsoft.com/update-guide/vulnerability/CVE...
vendor-advisorypatch

CVSS V3.1

Score:
7.5
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
High
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.