CVE-2026-114166: Microsoft Raw Image Extension Information Disclosure Vulnerability
Published Nov 10, 2026
·Updated
Buffer over-read in Windows Raw Image Extension allows an unauthorized attacker to disclose information locally.
Other sources
Microsoft Raw Image Extension Information Disclosure Vulnerability
— Microsoft
Affected Software
2 affected componentsFixes available
Microsoft Raw Image Extension<2.4.43.0
2.4.43.0
Microsoft Raw Image Extension<2.5.42.0
2.5.42.0
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 2.4.43.0 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 2.5.42.0
Event History
Nov 10, 2026
CVE Published
via Microsoft·04:00 PM
Data Sourced
via Microsoft·04:00 PM
DescriptionSeverityWeakness
Data Sourced
via Microsoft·04:00 PM
Affected Software
CVE Published
via MITRE·06:15 PM
Data Sourced
via MITRE·06:15 PM
DescriptionSeverity
Data Sourced
via NVD·07:19 PM
DescriptionSeverityWeakness