PT-2026-58620 · Microsoft · Windows Codecs Library

CVE-2026-57083 · Published 2026-07-14 · Updated 2026-07-14

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions Microsoft Windows Codecs Library (affected versions not specified)

Description An issue exists where the use of an uninitialized resource allows an unauthorized attacker to disclose sensitive information locally.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Use of Uninitialized Resource

Weakness Enumeration

CWE-908

Related Identifiers

CVE-2026-57083

Affected Products

Windows Codecs Library

References · 4

• https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-57083 · Vendor Advisory
• https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-57083 · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-57083 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2026-57083 · Security Note