CVE-2023-29340: high-severity vulnerability in Microsoft AV1 Video Extension
AV1 Video Extension Remote Code Execution Vulnerability
Published · Updated
21Vexday Risk Score
No sign of exploitation. No public exploitation artifact known so far.
ssvc Trackcvss 7.8epss 0.7%
exploitation probability
0.7%top 50% of all CVEs
observed exploitation
nono source reports it
AV1 Video Extension Remote Code Execution Vulnerability
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
Affected products
Microsoft · AV1 Video ExtensionRelated CVEs — Microsoft AV1 Video Extension
In the same product, most dangerous first.
CVE-2020-17105HIGHAV1 Video Extension Remote Code Execution VulnerabilityEPSS 3.7%CVE-2022-30193HIGHAV1 Video Extension Remote Code Execution VulnerabilityEPSS 2.2%CVE-2022-30167HIGHAV1 Video Extension Remote Code Execution VulnerabilityEPSS 2.2%CVE-2022-38019HIGHAV1 Video Extension Remote Code Execution VulnerabilityEPSS 0.9%CVE-2023-29341HIGHAV1 Video Extension Remote Code Execution VulnerabilityEPSS 0.7%