WORLD WATCH · November 13, 2026 · EXPOSURE
CVE-2026-113749 Microsoft Windows Codecs Library Remote Code...
The Intel128 wire recorded this event in the exposure category.
- Reported by
- MSRC, Zero Day Initiative
- Outlets reporting
- 2
- Category
- EXPOSURE
- Identifiers
- CVE-2026-113749
- Newest report
- November 13, 2026
Plain-English brief. Written for readers who work in a second language.
Key takeaways
- The lead report comes from MSRC.
- 2 outlets reported this event in the same window.
- Intel128 has no independent confirmation of the impact yet.
- Added Microsoft Office software to the Security Updates table. Customers that are running supported version of Microsoft Office are...
What happened
The report comes from MSRC.
2 outlets reported this event in the same window. The lead item appears below.
- CVE-2026-113749 Microsoft Windows Codecs Library Remote Code Execution Vulnerability
- ZDI-26-971: Signal for Windows Insufficient UI Warning Remote Code Execution Vulnerability
- ZDI-26-967: Microsoft Windows Remote Desktop Connection Client Link Following Remote Code Execution Vulnerability
Why it matters
Intel128 has no independent confirmation of the scale or the impact at this time. Treat every detail as open until a vendor or a national authority publishes an assessment.
What to do
- Check your estate for the product or the version named in the report.
- Apply the vendor patch when the vendor publishes it.
- Put the event on the agenda of your next intelligence meeting.
SOURCE: INTEL128 WORLD WATCH (UPDATED NOV 13, 2026). This brief summarizes reporting by MSRC, Zero Day Initiative. Intel128 writes the summary and credits the outlet. Read the summary as a starting point, not as a substitute for the original reporting.