hevc_video_extensions_for_licensed_applications vulnerabilities
CVEs whose affected-version data names the hevc_video_extensions_for_licensed_applications package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.
3 CVEsRSS
CVE-2026-108400High· 8.8Integer overflow or wraparound in Microsoft Windows Codecs Library allows an unauthorized attacker to execute code over a network.
Integer overflow or wraparound in Microsoft Windows Codecs Library allows an unauthorized attacker to execute code over a network.
▾ TwilightMicrosoft · HEVC Video ExtensionsEPSS 0.91%via NVD
CVE-2026-58600High· 7.8Heap-based buffer overflow in Microsoft Windows Codecs Library allows an unauthorized attacker to elevate privileges locally.
Heap-based buffer overflow in Microsoft Windows Codecs Library allows an unauthorized attacker to elevate privileges locally.
▾ Twilightmicrosoft · hevc_video_extensionsEPSS 0.47%via NVD
CVE-2026-58599High· 7.8Heap-based buffer overflow in Microsoft Windows Codecs Library allows an unauthorized attacker to execute code locally.
Heap-based buffer overflow in Microsoft Windows Codecs Library allows an unauthorized attacker to execute code locally.
▾ Twilightmicrosoft · hevc_video_extensionsEPSS 0.47%via NVD