CVE-2026-57083
Full vulnerability record from the local CVENow database.
Description
Use of uninitialized resource in Microsoft Windows Codecs Library allows an unauthorized attacker to disclose information locally.
Severity
MEDIUM
CVSS score
5.5
(v3.1)
Vulnerability status
Analyzed
Source identifier
Published
2026-07-14 18:18:32.323000
Last modified
2026-10-28 20:18:12.810000
View original CVE JSON
{
"id": "CVE-2026-57083",
"sourceIdentifier": "[email protected]",
"published": "2026-07-14T18:18:32.323",
"lastModified": "2026-10-28T20:18:12.810",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "Use of uninitialized resource in Microsoft Windows Codecs Library allows an unauthorized attacker to disclose information locally."
}
],
"affected": [
{
"source": "[email protected]",
"affectedData": [
{
"vendor": "Microsoft",
"product": "Microsoft Office 365 for Mac",
"versions": [
{
"version": "1.0.0",
"lessThan": "16.112.26090911",
"versionType": "custom",
"status": "affected"
}
]
},
{
"vendor": "Microsoft",
"product": "Microsoft Office for Android",
"versions": [
{
"version": "16.0.1",
"lessThan": "16.0.20430.20000",
"versionType": "custom",
"status": "affected"
}
]
},
{
"vendor": "Microsoft",
"product": "Microsoft Office LTSC for Mac 2021",
"versions": [
{
"version": "16.0.1",
"lessThan": "16.112.26090911",
"versionType": "custom",
"status": "affected"
}
]
},
{
"vendor": "Microsoft",
"product": "Microsoft Office LTSC for Mac 2024",
"versions": [
{
"version": "16.0.0",
"lessThan": "16.112.26090911",
"versionType": "custom",
"status": "affected"
}
]
}
]
}
],
"metrics": {
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Secondary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"attackVector": "LOCAL",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "REQUIRED",
"scope": "UNCHANGED",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"availabilityImpact": "NONE"
},
"exploitabilityScore": 1.8,
"impactScore": 3.6
}
],
"ssvcV203": [
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"ssvcData": {
"timestamp": "2026-07-16T14:21:35.891179Z",
"id": "CVE-2026-57083",
"options": [
{
"exploitation": "none"
},
{
"automatable": "no"
},
{
"technicalImpact": "partial"
}
],
"role": "CISA Coordinator",
"version": "2.0.3"
}
}
]
},
"weaknesses": [
{
"source": "[email protected]",
"type": "Secondary",
"description": [
{
"lang": "en",
"value": "CWE-908"
}
]
}
],
"configurations": [
{
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x64:*",
"versionEndExcluding": "10.0.14393.9339",
"matchCriteriaId": "1A8DB50E-7571-4925-A293-CAB93ECD0EBF"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x86:*",
"versionEndExcluding": "10.0.14393.9339",
"matchCriteriaId": "A9DC4EC9-4E72-4CBC-BA0B-39CCC45DB8CE"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x64:*",
"versionEndExcluding": "10.0.17763.9020",
"matchCriteriaId": "643F21D8-3A5B-477D-AFFC-2451DDC472CC"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*",
"versionEndExcluding": "10.0.17763.9020",
"matchCriteriaId": "A68E51D8-C76C-4C9E-9CBD-C7D4D4BCDFAA"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:microsoft:windows_10_21h2:*:*:*:*:*:*:arm64:*",
"versionEndExcluding": "10.0.19044.7548",
"matchCriteriaId": "038B4A9C-95B9-440A-83A2-AF10BC24590C"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:microsoft:windows_10_21h2:*:*:*:*:*:*:x64:*",
"versionEndExcluding": "10.0.19044.7548",
"matchCriteriaId": "FCA35115-58F4-4015-9CA2-C33F45605AA6"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:microsoft:windows_10_21h2:*:*:*:*:*:*:x86:*",
"versionEndExcluding": "10.0.19044.7548",
"matchCriteriaId": "02C2F9D5-439A-45D2-98EB-08DB85673712"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:microsoft:windows_10_22h2:*:*:*:*:*:*:arm64:*",
"versionEndExcluding": "10.0.19045.7548",
"matchCriteriaId": "80F87C10-5D02-4EC9-B1A4-8FD7F6CFE758"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:microsoft:windows_10_22h2:*:*:*:*:*:*:x64:*",
"versionEndExcluding": "10.0.19045.7548",
"matchCriteriaId": "048B08D3-1959-47C0-A592-FCF0DCCD65A4"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:microsoft:windows_10_22h2:*:*:*:*:*:*:x86:*",
"versionEndExcluding": "10.0.19045.7548",
"matchCriteriaId": "A41562FD-04BC-4FC3-B847-D87D164A9C15"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:microsoft:windows_11_24h2:*:*:*:*:*:*:arm64:*",
"versionEndExcluding": "10.0.26100.8875",
"matchCriteriaId": "6D55C01A-5908-4CFC-BEB6-BBF3B6F0C5AF"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:microsoft:windows_11_24h2:*:*:*:*:*:*:x64:*",
"versionEndExcluding": "10.0.26100.8875",
"matchCriteriaId": "740B730D-AEC5-4735-A122-B1CF8B3C364C"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:microsoft:windows_11_25h2:*:*:*:*:*:*:arm64:*",
"versionEndExcluding": "10.0.26200.8875",
"matchCriteriaId": "E26E96B6-1469-46AE-9CB5-AB7A0372C398"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:microsoft:windows_11_25h2:*:*:*:*:*:*:x64:*",
"versionEndExcluding": "10.0.26200.8875",
"matchCriteriaId": "DDBCA9E4-7BFB-423A-B7A7-9CBF5625053D"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:microsoft:windows_11_26h1:*:*:*:*:*:*:arm64:*",
"versionEndExcluding": "10.0.28000.2269",
"matchCriteriaId": "9C7AD7ED-307B-40B9-B706-45FB178C36D8"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:microsoft:windows_11_26h1:*:*:*:*:*:*:x64:*",
"versionEndExcluding": "10.0.28000.2269",
"matchCriteriaId": "8967AF79-CAD0-4F87-85A5-95D031C9FEFA"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*",
"matchCriteriaId": "A7DF96F8-BA6A-4780-9CA3-F719B3F81074"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
"matchCriteriaId": "DB18C4CE-5917-401E-ACF7-2747084FD36E"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:-:*:x64:*",
"versionEndExcluding": "10.0.14393.9339",
"matchCriteriaId": "8DCDD3DB-6205-4E1D-8609-807BFC2AE4E3"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:-:*:x64:*",
"versionEndExcluding": "10.0.17763.9020",
"matchCriteriaId": "1E40816E-72E5-439A-887B-17EBF5E803FE"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:x64:*",
"versionEndExcluding": "10.0.20348.5386",
"matchCriteriaId": "A152E6BF-9453-435F-A854-FA85D36922B4"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:x64:*",
"versionEndExcluding": "10.0.26100.33158",
"matchCriteriaId": "CB74F035-459D-4608-9A22-DEED9559A2A0"
}
]
}
]
}
],
"references": [
{
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-57083",
"source": "[email protected]",
"tags": [
"Patch",
"Vendor Advisory"
]
}
]
}