Microsoft Raw Image Extension vulnerabilities

18 CVEs affecting Microsoft Raw Image Extension, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2026-96943, published 2026-10-13.

More from Microsoft.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2021-28468, published 2021-04-13. High severity, CVSS 7.8. EPSS: 5.9% chance of exploitation in the next 30 days. Raw Image Extension Remote Code Execution Vulnerability
• CVE-2020-17086, published 2020-11-11. High severity, CVSS 7.8. EPSS: 4.6% chance of exploitation in the next 30 days. Raw Image Extension Remote Code Execution Vulnerability
• CVE-2020-17081, published 2020-11-11. Medium severity, CVSS 5.5. EPSS: 3.7% chance of exploitation in the next 30 days. Microsoft Raw Image Extension Information Disclosure Vulnerability
• CVE-2020-17078, published 2020-11-11. High severity, CVSS 7.8. EPSS: 3.2% chance of exploitation in the next 30 days. Raw Image Extension Remote Code Execution Vulnerability
• CVE-2020-17079, published 2020-11-11. High severity, CVSS 7.8. EPSS: 3.1% chance of exploitation in the next 30 days. Raw Image Extension Remote Code Execution Vulnerability
• CVE-2020-17082, published 2020-11-11. High severity, CVSS 7.8. EPSS: 2.9% chance of exploitation in the next 30 days. Raw Image Extension Remote Code Execution Vulnerability
• CVE-2022-23300, published 2022-03-09. High severity, CVSS 7.8. EPSS: 2.3% chance of exploitation in the next 30 days. Raw Image Extension Remote Code Execution Vulnerability
• CVE-2022-23295, published 2022-03-09. High severity, CVSS 7.8. EPSS: 2.3% chance of exploitation in the next 30 days. Raw Image Extension Remote Code Execution Vulnerability
• CVE-2021-28466, published 2021-04-13. High severity, CVSS 7.8. EPSS: 2.3% chance of exploitation in the next 30 days. Raw Image Extension Remote Code Execution Vulnerability
• CVE-2021-43214, published 2021-12-15. Critical severity, CVSS 9.8. EPSS: 1.8% chance of exploitation in the next 30 days. Web Media Extensions Remote Code Execution Vulnerability

Latest

• CVE-2026-96943, published 2026-10-13. High severity, CVSS 8.8. EPSS: 0.6% chance of exploitation in the next 30 days. Integer overflow or wraparound in Windows Raw Image Extension allows an unauthorized attacker to execute code over a network.
• CVE-2026-96202, published 2026-10-13. High severity, CVSS 8.8. EPSS: 0.8% chance of exploitation in the next 30 days. Heap-based buffer overflow in Windows Raw Image Extension allows an unauthorized attacker to execute code over a network.
• CVE-2026-69649, published 2026-09-08. High severity, CVSS 8.8. EPSS: 0.8% chance of exploitation in the next 30 days. Heap-based buffer overflow in Windows Raw Image Extension allows an unauthorized attacker to execute code over a network.
• CVE-2023-32051, published 2023-07-11. High severity, CVSS 7.8. EPSS: 0.8% chance of exploitation in the next 30 days. Raw Image Extension Remote Code Execution Vulnerability
• CVE-2023-28292, published 2023-04-11. High severity, CVSS 7.8. EPSS: 0.6% chance of exploitation in the next 30 days. Raw Image Extension Remote Code Execution Vulnerability
• CVE-2023-28291, published 2023-04-11. High severity, CVSS 7.8. EPSS: 0.6% chance of exploitation in the next 30 days. Raw Image Extension Remote Code Execution Vulnerability
• CVE-2022-44687, published 2022-12-13. High severity, CVSS 7.8. EPSS: 0.8% chance of exploitation in the next 30 days. Raw Image Extension Remote Code Execution Vulnerability
• CVE-2022-38011, published 2022-09-13. High severity, CVSS 7.3. EPSS: 0.9% chance of exploitation in the next 30 days. Raw Image Extension Remote Code Execution Vulnerability