QID 91847

Date Published: 2021-12-15

QID 91847: Microsoft Windows VP9 Video Extension Information Disclosure Vulnerability

Microsoft has disclosed Information Disclosure Vulnerability in Windows VP9 Video Extensions.

Affected Product:
VP9 Video Extensions prior to version prior to 1.0.42791.0
QID detection Logic:
The detection gets the version of VP9VideoExtension by querying wmi class Win32_InstalledStoreProgram.

The type of information that could be disclosed if an attacker successfully exploited this vulnerability is uninitialized memory.

  • CVSS V3 rated as Medium - 5.5 severity.
  • CVSS V2 rated as Low - 2.1 severity.
  • Solution
    Users are advised to check CVE-2021-43243 for more information.

    CVEs related to QID 91847

    Software Advisories
    Advisory ID Software Component Link
    CVE-2021-43243 URL Logo msrc.microsoft.com/update-guide/vulnerability/CVE-2021-43243