Known vulnerabilities in HEVC Video Extensions from Device Manufacturer

Vendor: Microsoft
Software: HEVC Video Extensions from Device Manufacturer
Software CPE: cpe:2.3:a:microsoft:hevc_video_extensions_from_device_manufacturer:*:*:*:*:*:*:*:*
Website: https://www.microsoft.com
Total vulnerabilities: 2
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 8.7

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting HEVC Video Extensions from Device Manufacturer HEVC Video Extensions from Device Manufacturer is affected by 2 known vulnerabilities: 2 high Critical High Medium Low

Vulnerabilities (2)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU148159 - Heap-based Buffer Overflow
CVE-2026-58600		 CWE-122 High
No
No
 2.4.86.0, 2.5.25.0 09.09.2026 SB2026090903
#VU148108 - Heap-based Buffer Overflow
CVE-2026-58599		 CWE-122 High
No
No
 2.4.86.0, 2.5.25.0 09.09.2026 SB2026090903