CVE-2022-29105

Summary

CVE-2022-29105 is a remote code execution vulnerability affecting Microsoft Windows Media Foundation. Maliciously crafted media files can be used to exploit this issue, leading to an attacker gaining the ability to execute arbitrary code on the vulnerable system. Successful exploitation of this vulnerability could allow an attacker to install programs, view, modify, or delete data, or create new accounts with full user rights. The vulnerability requires user interaction through media playback, increasing the risk to users who open untrusted media files. Microsoft has released patches to address this issue, and it is recommended that affected systems be updated as soon as possible to mitigate this threat.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.