M365 Change Tracker

← All changes · security · CVE-2026-113749

CVE-2026-113749CriticalMonitor

Microsoft Windows Codecs Library Remote Code Execution Vulnerability

Severity Critical  ·  Urgency Monitor

Why it matters: Critical severity (CVSS 7.5)

Remote Code Execution · Critical · CVSS 7.5. Affects: Windows 10 Version, Windows Server, Windows 10 Version 21H2 for 32-bit Systems, Windows 10 Version 21H2 for ARM64-based Systems, Windows 10 Version 21H2 for x64-based Systems, Windows 10 Version 22H2 for 32-bit Systems.

CVSS 7.5EPSS 0.8%Security update published 2026-11-13Applies to On-premisesKB5131291NVD

Affected: Windows 10 Version, Windows Server, Windows 10 Version 21H2 for 32-bit Systems, Windows 10 Version 21H2 for ARM64-based Systems, Windows 10 Version 21H2 for x64-based Systems, Windows 10 Version 22H2 for 32-bit Systems

Related changes

Change history

2026-11-13 · First captured by tracker

View at Microsoft →