Known vulnerabilities in HEVC Video Extensions

Vendor: Microsoft
Software: HEVC Video Extensions
Software CPE: cpe:2.3:a:microsoft:hevc_video_extensions:*:*:*:*:*:*:*:*
Website: https://www.microsoft.com
Total vulnerabilities: 44
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 8.7

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting HEVC Video Extensions HEVC Video Extensions is affected by 44 known vulnerabilities: 44 high Critical High Medium Low

Vulnerabilities (44)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU148159 - Heap-based Buffer Overflow
CVE-2026-58600		 CWE-122 High
No
No
 2.4.87.0 09.09.2026 SB2026090903
#VU148108 - Heap-based Buffer Overflow
CVE-2026-58599		 CWE-122 High
No
No
 2.4.87.0 09.09.2026 SB2026090903
#VU79154 - Improper input validation
CVE-2023-38170		 CWE-20 High
No
No
 - 08.08.2023 SB2023080870
#VU64289 - Improper input validation
CVE-2022-22018		 CWE-20 High
No
No
 - 14.06.2022 SB2022061429
#VU64288 - Improper input validation
CVE-2022-29111		 CWE-20 High
No
No
 - 14.06.2022 SB2022061429
#VU64287 - Improper input validation
CVE-2022-29119		 CWE-20 High
No
No
 - 14.06.2022 SB2022061429
#VU64286 - Improper input validation
CVE-2022-30188		 CWE-20 High
No
No
 - 14.06.2022 SB2022061429
#VU62185 - Improper input validation
CVE-2022-24532		 CWE-20 High
No
No
 - 12.04.2022 SB2022041251
#VU61153 - Improper Control of Generation of Code ('Code Injection')
CVE-2022-24452		 CWE-94 High
No
No
 - 08.03.2022 SB2022030829
#VU61152 - Improper Control of Generation of Code ('Code Injection')
CVE-2022-24453		 CWE-94 High
No
No
 - 08.03.2022 SB2022030829
#VU61151 - Improper Control of Generation of Code ('Code Injection')
CVE-2022-24456		 CWE-94 High
No
No
 - 08.03.2022 SB2022030829
#VU61150 - Improper Control of Generation of Code ('Code Injection')
CVE-2022-22007		 CWE-94 High
No
No
 - 08.03.2022 SB2022030829
#VU61149 - Improper Control of Generation of Code ('Code Injection')
CVE-2022-23301		 CWE-94 High
No
No
 - 08.03.2022 SB2022030829
#VU61148 - Improper Control of Generation of Code ('Code Injection')
CVE-2022-22006		 CWE-94 High
No
No
 - 08.03.2022 SB2022030829
#VU60446 - Improper Control of Generation of Code ('Code Injection')
CVE-2022-21844		 CWE-94 High
No
No
 - 08.02.2022 SB2022020853
#VU60445 - Improper Control of Generation of Code ('Code Injection')
CVE-2022-21926		 CWE-94 High
No
No
 - 08.02.2022 SB2022020853
#VU60444 - Improper Control of Generation of Code ('Code Injection')
CVE-2022-21927		 CWE-94 High
No
No
 - 08.02.2022 SB2022020853
#VU59465 - Improper Control of Generation of Code ('Code Injection')
CVE-2022-21917		 CWE-94 High
No
No
 - 11.01.2022 SB2022011141
#VU58936 - Improper Control of Generation of Code ('Code Injection')
CVE-2021-41360		 CWE-94 High
No
No
 - 14.12.2021 SB2021121458
#VU58935 - Improper Control of Generation of Code ('Code Injection')
CVE-2021-40452		 CWE-94 High
No
No
 - 14.12.2021 SB2021121458


Showing elements 1 - 20 out of 44