CVE-2026-69715

CVE-2026-69715 is a memory-safety vulnerability in Windows DirectShow, Microsoft's multimedia framework, classified as an out-of-bounds read (CWE-125) with a heap-based buffer overflow also listed (CWE-122). According to Microsoft's scoring, an unauthorized attacker can trigger the flaw remotely over a network (AV:N, AC:L, PR:N, UI:N), i.e., through network-supplied input processed by DirectShow without authentication or user interaction. Successful exploitation allows the attacker to execute arbitrary code on the affected system. Any Windows system running the DirectShow component is potentially affected, which broadly includes Windows desktop and server deployments. There is currently no public proof-of-concept, the CVE is not in CISA's KEV catalog, and EPSS estimates only a 1.0% chance of exploitation in the next 30 days, so no in-the-wild exploitation is known at this time.

What to do: Apply Microsoft's security update for this CVE as soon as it is available, checking the MSRC advisory for the list of affected Windows builds and prioritizing hosts that ingest or process media content over the network (media servers, transcoding or streaming services, and applications parsing remote/untrusted media). Because no public PoC or known exploitation exists, emergency patching is not urgent, but defenders should verify DirectShow-exposed services are covered when the fix ships; no workaround is specified in the available data.