Microsoft AV1 Video Extension vulnerabilities

6 CVEs affecting Microsoft AV1 Video Extension, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2023-29341, published 2023-05-09.

More from Microsoft.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2020-17105, published 2020-11-11. High severity, CVSS 7.8. EPSS: 3.7% chance of exploitation in the next 30 days. AV1 Video Extension Remote Code Execution Vulnerability
• CVE-2022-30193, published 2022-06-15. High severity, CVSS 7.8. EPSS: 2.3% chance of exploitation in the next 30 days. AV1 Video Extension Remote Code Execution Vulnerability
• CVE-2022-30167, published 2022-06-15. High severity, CVSS 7.8. EPSS: 2.3% chance of exploitation in the next 30 days. AV1 Video Extension Remote Code Execution Vulnerability
• CVE-2022-38019, published 2022-09-13. High severity, CVSS 7.8. EPSS: 0.9% chance of exploitation in the next 30 days. AV1 Video Extension Remote Code Execution Vulnerability
• CVE-2023-29341, published 2023-05-09. High severity, CVSS 7.8. EPSS: 0.7% chance of exploitation in the next 30 days. AV1 Video Extension Remote Code Execution Vulnerability
• CVE-2023-29340, published 2023-05-09. High severity, CVSS 7.8. EPSS: 0.7% chance of exploitation in the next 30 days. AV1 Video Extension Remote Code Execution Vulnerability