Known Vulnerabilities for Raw Image Extension by Microsoft
Listed below are 10 of the newest known vulnerabilities associated with "Raw Image Extension" by "Microsoft".
These CVEs are retrieved based on exact matches on listed software, hardware, and vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed software information are still displayed.
Data on known vulnerable versions is also displayed based on information from known CPEs
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-126186 json | Active Storage makes it simple to upload and reference files in cloud services and attach those files to Active Record object... | Not Provided | 2026-11-10 | 2026-11-10 |
| CVE-2026-120518 json | The BuddyPress XProfile Image Field plugin for WordPress is vulnerable to arbitrary file deletion in all versions up to, and ... | Not Provided | 2026-11-03 | 2026-11-07 |
| CVE-2026-116827 json | YesWiki before 4.7.0 contains a server-side request forgery vulnerability in the Bazar CSV import copyUrlToLocalFile() functi... | Not Provided | 2026-10-27 | 2026-11-03 |
| CVE-2026-116617 json | The Motors – Car Dealership & Classified Listings Plugin plugin for WordPress is vulnerable to File Deletion in all version... | Not Provided | 2026-11-05 | 2026-11-05 |
| CVE-2026-114169 json | Heap-based buffer overflow in Windows Raw Image Extension allows an unauthorized attacker to execute code over a network. | Not Provided | 2026-11-10 | 2026-11-10 |
| CVE-2026-114166 json | Buffer over-read in Windows Raw Image Extension allows an unauthorized attacker to disclose information locally. | Not Provided | 2026-11-10 | 2026-11-10 |
| CVE-2026-113491 json | The GeoDirectory WordPress plugin before 2.8.194 does not validate a user-supplied image URL before using it as a local file... | Not Provided | 2026-10-24 | 2026-10-24 |
| CVE-2026-112067 json | The extension hides the correct answer to each CAPTCHA inside the image data of the CAPTCHA itself. Anyone who can request a ... | Not Provided | 2026-10-20 | 2026-10-20 |
| CVE-2026-111255 json | The affiliate-toolkit – Multi-Network Affiliate & Amazon Product Display plugin for WordPress is vulnerable to Arbitrary Fi... | Not Provided | 2026-10-28 | 2026-10-28 |
| CVE-2026-107844 json | Contao is an Open Source CMS. From version 5.0.0 until 5.3.50 and 5.7.12, ImagesController joins the user-controlled {path} p... | Not Provided | 2026-10-09 | 2026-10-14 |