Known vulnerabilities in Raw Image Extension

Vendor: Microsoft
Software: Raw Image Extension
Software CPE: cpe:2.3:a:microsoft:raw_image_extension:*:*:*:*:*:*:*:*
Website: https://www.microsoft.com
Total vulnerabilities: 18
Public exploits: 1
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Raw Image Extension Raw Image Extension is affected by 18 known vulnerabilities: 16 high, 2 medium Critical High Medium Low

Vulnerabilities (18)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU148463 - Heap-based Buffer Overflow
CVE-2026-69649		 CWE-122 High
No
No
 2.4.24.0, 2.5.24.0 09.09.2026 SB2026090948
#VU78181 - Improper input validation
CVE-2023-32051		 CWE-20 High
No
No
 - 12.07.2023 SB2023071241
#VU74866 - Improper input validation
CVE-2023-28291		 CWE-20 High
No
No
 - 11.04.2023 SB2023041146
#VU74865 - Improper input validation
CVE-2023-28292		 CWE-20 High
No
No
 - 11.04.2023 SB2023041146
#VU70185 - Improper input validation
CVE-2022-44687		 CWE-20 High
No
No
 - 13.12.2022 SB2022121362
#VU67266 - Improper input validation
CVE-2022-38011		 CWE-20 Medium
No
No
 - 13.09.2022 SB2022091367
#VU61155 - Improper Control of Generation of Code ('Code Injection')
CVE-2022-23295		 CWE-94 High
No
No
 - 08.03.2022 SB2022030830
#VU61154 - Improper Control of Generation of Code ('Code Injection')
CVE-2022-23300		 CWE-94 High
No
No
 - 08.03.2022 SB2022030830
#VU58947 - Improper Control of Generation of Code ('Code Injection')
CVE-2021-43214		 CWE-94 High
No
No
 - 14.12.2021 SB2021121468
#VU52901 - Integer underflow
 CWE-191 High
No
No
 10.0.20236.1001 06.05.2021 SB2021050601
#VU52890 - Out-of-bounds write
 CWE-787 High
No
No
 1.0.40392.0 05.05.2021 SB2021050512
#VU52152 - Improper Control of Generation of Code ('Code Injection')
CVE-2021-28468		 CWE-94 High
No
No
 - 13.04.2021 SB2021041337
#VU52151 - Improper Control of Generation of Code ('Code Injection')
CVE-2021-28466		 CWE-94 High
No
No
 - 13.04.2021 SB2021041337
#VU48348 - Out-of-bounds write
CVE-2020-17081		 CWE-787 Medium
No
No
 - 10.11.2020 SB2020111073
#VU48347 - Improper Control of Generation of Code ('Code Injection')
CVE-2020-17086		 CWE-94 High
Available
No
 - 10.11.2020 SB2020111073
#VU48346 - Out-of-bounds write
CVE-2020-17082		 CWE-787 High
No
No
 - 10.11.2020 SB2020111073
#VU48345 - Stack-based buffer overflow
CVE-2020-17079		 CWE-121 High
No
No
 - 10.11.2020 SB2020111073
#VU48344 - Out-of-bounds write
CVE-2020-17078		 CWE-787 High
No
No
 - 10.11.2020 SB2020111073