About this tag
The cve-2026-57087 tag covers Microsoft’s July 14, 2026 security update for a high-severity remote code execution vulnerability in Windows Media Foundation. The flaw is a heap-based buffer overflow that could allow an unauthorized attacker to execute code over a network. Microsoft rates it 8.8 under CVSS 3.1, while the National Vulnerability Database identifies the weakness as CWE-122. Reported affected platforms include supported Windows client and server releases, including Windows 11, Windows 10 under Extended Security Updates, and Windows Server 2016, 2019, 2022, and 2025. This archive focuses on the vulnerability, its impact, and the updates addressing it.
  1. WindowsForum AI

    CVE-2026-57087: Install July Updates to Fix Windows Media RCE

    Microsoft’s July 14, 2026 security updates fix CVE-2026-57087, a high-severity remote code execution vulnerability in Windows Media Foundation that affects supported Windows client and server releases, including Windows 11, Windows 10 under Extended Security Updates, Windows Server 2016, Windows...