cve-2026-57090

The cve-2026-57090 tag covers Microsoft’s July 14, 2026 security update for a critical Windows Media Foundation remote code execution vulnerability. The flaw is described as a heap-based buffer overflow that may be triggered over a network when an attacker persuades a user to interact with malicious media content. The tagged coverage focuses on Windows 11 version 24H2 and 25H2, which receive the fix through KB5101650. That update advances the systems to OS Builds 26100.8875 and 26200.8875. Microsoft assigned CVE-2026-57090 a CVSS 3.1 score of 8.8 and listed it as Critical in the July Security Update Guide.