Known Vulnerabilities for Picture It by Microsoft
Listed below are 1 of the newest known vulnerabilities associated with "Picture It" by "Microsoft".
These CVEs are retrieved based on exact matches on listed software, hardware, and vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed software information are still displayed.
Data on known vulnerable versions is also displayed based on information from known CPEs
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-34545 | OpenEXR provides the specification and reference implementation of the EXR file format, an image storage format for the motio... | Not Provided | 2026-04-01 | 2026-04-01 |
| CVE-2026-34544 | OpenEXR provides the specification and reference implementation of the EXR file format, an image storage format for the motio... | Not Provided | 2026-04-01 | 2026-04-01 |
| CVE-2026-34543 | OpenEXR provides the specification and reference implementation of the EXR file format, an image storage format for the motio... | Not Provided | 2026-04-01 | 2026-04-02 |
| CVE-2026-33679 | Vikunja is an open-source self-hosted task management platform. Prior to version 2.2.1, the `DownloadImage` function in `pkg/... | Not Provided | 2026-03-24 | 2026-03-24 |
| CVE-2025-58257 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Picture-Planet GmbH Ver... | Not Provided | 2025-09-22 | 2026-04-01 |
| CVE-2025-53221 | Missing Authorization vulnerability in codeablepress CodeablePress codeablepress-simple-frontend-profile-picture-upload allow... | Not Provided | 2025-08-14 | 2026-04-01 |
| CVE-2025-32676 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Picture-Planet GmbH Ver... | Not Provided | 2025-04-09 | 2026-04-01 |
| CVE-2025-32609 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Picture-Planet GmbH Ver... | Not Provided | 2025-04-17 | 2026-04-01 |
| CVE-2025-26581 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in videowhisper Picture Ga... | Not Provided | 2025-03-26 | 2026-04-01 |
| CVE-2024-49658 | Unrestricted Upload of File with Dangerous Type vulnerability in ecomerciar Woocommerce Custom Profile Picture woo-custom-pro... | Not Provided | 2024-10-23 | 2026-04-01 |