CVE-2026-114167Published

HEVC Video Extensions Remote Code Execution Vulnerability

Exact source revision recorded 11 Nov 2026 02:25:43 UTC. It does not establish the source's current position. Latest evidence.

Recorded JSON

cve-program · CVE-2026-114167

Published

HEVC Video Extensions

Vendor product

Original vendor version evidence · not evaluated as a NuGet range

{
                    "vendor": "Microsoft",
                    "product": "HEVC Video Extensions",
                    "platforms": [
                        "Windows 10 version 1809",
                        "Windows 10 version 21H2",
                        "Windows 10 version 22H2",
                        "Windows 11 version 23H2",
                        "Windows 11 version 24H2",
                        "Windows 11 version 25H2",
                        "Windows 11 version 26H1",
                        "Windows 11 version 26H2"
                    ],
                    "versions": [
                        {
                            "version": "1.0.0",
                            "lessThan": "2.4.151.0",
                            "versionType": "custom",
                            "status": "affected"
                        }
                    ]
                }

HEVC Video Extensions for Licensed Applications

Vendor product

Original vendor version evidence · not evaluated as a NuGet range

{
                    "vendor": "Microsoft",
                    "product": "HEVC Video Extensions for Licensed Applications",
                    "platforms": [
                        "Windows 10 version 1809",
                        "Windows 10 version 21H2",
                        "Windows 10 version 22H2",
                        "Windows 11 version 23H2",
                        "Windows 11 version 24H2",
                        "Windows 11 version 25H2",
                        "Windows 11 version 26H1",
                        "Windows 11 version 26H2"
                    ],
                    "versions": [
                        {
                            "version": "2.0.0.0",
                            "lessThan": "2.4.150.0",
                            "versionType": "custom",
                            "status": "affected"
                        }
                    ]
                }

HEVC Video Extensions from Device Manufacturer

Vendor product

Original vendor version evidence · not evaluated as a NuGet range

{
                    "vendor": "Microsoft",
                    "product": "HEVC Video Extensions from Device Manufacturer",
                    "platforms": [
                        "Windows 10 version 1809",
                        "Windows 10 version 21H2",
                        "Windows 10 version 22H2",
                        "Windows 11 version 23H2",
                        "Windows 11 version 24H2",
                        "Windows 11 version 25H2",
                        "Windows 11 version 26H1",
                        "Windows 11 version 26H2"
                    ],
                    "versions": [
                        {
                            "version": "2.0.0.0",
                            "lessThan": "2.4.149.0",
                            "versionType": "custom",
                            "status": "affected"
                        }
                    ]
                }

Original source record · Cite this exact observation · Complete original publisher JSON