Vulnerability Spotlight: Code execution vulnerability in Microsoft Media Foundation

Summary: Cisco Talos's Marcin Noga discovered a code execution vulnerability in Microsoft Media Foundation's MPEG4 DLL, specifically an exploitable type confusion bug in mfasfsrcsnk.dll version 10.0.18362.207. An attacker triggers it by providing a victim a specially crafted ASF file, and Microsoft disclosed the flaw in this month's Patch Tuesday with Snort rules 52095 and 52096 covering it.
What you should know: The exploit path is a single malformed media file handed to a user, so the exposure sits in whatever opens ASF content on your endpoints - and the fix only lands if Patch Tuesday updates are actually applied.

Read the original at Cisco Talos ↗

Topics: Vulnerabilities & Patching
Related: Attackers Exploit UnrealIRCd Flaw That Enables Server-Level Command Injection Cyber Risks · Nov 14, 2026
U.S. CISA adds Check Point and UnrealIRCd flaws to its Known Exploited Vulnerabilities catalog Cyber Risks · Nov 14, 2026
PostgreSQL Patches 52 Flaws, Including 22-Year-Old Bug Enabling Authenticated RCE Cyber Risks · Nov 13, 2026