cve-2026-56189

The cve-2026-56189 tag covers Microsoft’s July 2026 security update for a heap-based buffer overflow in Windows Media Foundation. The vulnerability is classified as a remote code execution issue, but its technical attack vector is local rather than a wormable network-service attack or unauthenticated exploit against a listening Windows port. An attacker could execute code after a user interacts with malicious media content. Coverage also highlights Microsoft’s July 14 advisory, the National Vulnerability Database record, and the CVSS 3.1 score of 7.8. Use this tag to follow the vulnerability’s technical details and guidance to install the applicable Windows updates.