Known Vulnerabilities for Raw Image Extension by Microsoft
Listed below are 10 of the newest known vulnerabilities associated with "Raw Image Extension" by "Microsoft".
These CVEs are retrieved based on exact matches on listed software, hardware, and vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed software information are still displayed.
Data on known vulnerable versions is also displayed based on information from known CPEs
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-112067 json | The extension hides the correct answer to each CAPTCHA inside the image data of the CAPTCHA itself. Anyone who can request a ... | Not Provided | 2026-10-20 | 2026-10-20 |
| CVE-2026-107844 json | Contao is an Open Source CMS. From version 5.0.0 until 5.3.50 and 5.7.12, ImagesController joins the user-controlled {path} p... | Not Provided | 2026-10-09 | 2026-10-14 |
| CVE-2026-104471 json | YesWiki before 4.6.7 contains an unrestricted file upload vulnerability that allows authenticated admins to write remote file... | Not Provided | 2026-10-02 | 2026-10-02 |
| CVE-2026-104461 json | YesWiki before 4.6.7 contains a stored cross-site scripting vulnerability in the Bazar FileField, which validates only the up... | Not Provided | 2026-10-02 | 2026-10-06 |
| CVE-2026-102783 json | Joomla Extension - balbooa.com - Path Traversal in image preview Gridbox < 2.20.4.0 - Gridbox contains the same prefix-only c... | Not Provided | 2026-10-08 | 2026-10-08 |
| CVE-2026-102781 json | Joomla Extension - ordasoft.com - Unauthenticated Destructive CRUD in OrdaSoft Touch Slider < 5.4.6 - modOsTouchSliderHelper:... | Not Provided | 2026-10-07 | 2026-10-07 |
| CVE-2026-102778 json | Joomla Extension - svenbluege.de - Cross-site scripting and open redirect on the share mini page in Event Gallery extension <... | Not Provided | 2026-10-05 | 2026-10-06 |
| CVE-2026-102776 json | Joomla Extension - svenbluege.de - Cross-site request forgery of list tasks of the backend in Event Gallery extension < 6.6.0... | Not Provided | 2026-10-05 | 2026-10-05 |
| CVE-2026-102635 json | ImageMagick versions before 7.1.2-32 and 6.9.13-57 contain uninitialized heap memory disclosure in the GIF decoder's applicat... | Not Provided | 2026-09-29 | 2026-09-30 |
| CVE-2026-102427 json | Joomla Extension - ordasoft.com - Unauthenticated Remote Code Execution in OrdaSoft Joomla CCK < 8.3.16 - site/uploader.php i... | Not Provided | 2026-09-30 | 2026-09-30 |