Microsoft DirectX Vulnerability
Microsoft DirectX contains a NULL byte overwrite vulnerability in the QuickTime Movie Parser Filter in quartz.dll in DirectShow which could allow remote attackers to execute arbitrary code via a crafted QuickTime media file.
CVSS Score
9.8
CRITICAL
Published
20 May 2026 00:00
Modified
N/A
Vendor
Microsoft
Product
DirectX
Source
CIRCL
Affected Versions
Fix
Vendor Patch / Mitigation Available
Affected Systems
Microsoft
DirectX
Microsoft
Windows Ancillary Function Driver For WinSock
SharePoint
Active Directory Federation Services
SharePoint Server
Windows
DirectX
Internet Explorer
Defender
Microsoft
Office
Visual Basic For Applications (VBA)
External Links
KEV Status
Known Exploited Vulnerability