CVE-2026-96202: Windows Raw Image Extension Remote Code Execution Vulnerability
Heap-based buffer overflow in Windows Raw Image Extension allows an unauthorized attacker to execute code over a network.
Other sources
Windows Raw Image Extension Remote Code Execution Vulnerability
— Microsoft
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 2.5.35.0 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 2.4.36.0
Event History
Frequently Asked Questions
What does an attacker need to do to exploit this issue?
The issue is remotely reachable and requires no attacker privileges, but user interaction is required. The available data does not specify the exact interaction or delivery mechanism.
What is the potential impact of a successful exploit?
A successful exploit can allow execution of attacker-controlled code. The provided severity vector indicates high confidentiality, integrity, and availability impact.