cve 2026 58610

The cve 2026 58610 tag covers Microsoft’s July 14, 2026 security update for a heap-based buffer overflow in Windows Media Foundation. The remote code execution vulnerability affects supported Windows 10, Windows 11, and Windows Server releases, and could allow an unauthenticated attacker to execute code after persuading a user to interact with malicious media content. Microsoft rates the issue Important, assigns it a CVSS 3.1 score of 7.8, and reports that exploitation is unlikely. The tagged coverage highlights the monthly cumulative update as the documented remediation, with vulnerability details also recorded in Microsoft’s Security Update Guide and the National Vulnerability Database.