Microsoft

Records18046All Threatist records

Exploited (KEV)406In CISA KEV

CVSS critical2330CVSS 9.0–10.0

CVSS high10410CVSS 7.0–8.9

Exploited now

Microsoft records in CISA KEV

TI-2026-79288 Google Brotli Unchecked Return Value Vulnerability CRITICAL 99KEV 2026-10-27 TI-2026-73128 Microsoft Windows Command Injection Vulnerability CRITICAL 97KEV 2026-10-13 TI-2026-46806 Microsoft SharePoint Code Injection Vulnerability CRITICAL 97KEV 2026-09-25 TI-2026-56567 Microsoft Windows Link Following Vulnerability CRITICAL 93KEV 2026-09-08 TI-2026-58845 Microsoft Windows Heap-Based Buffer Overflow Vulnerability CRITICAL 93KEV 2026-09-08 TI-2019-00798 Microsoft SQL Server Remote Code Execution Vulnerability CRITICAL 97KEV 2026-08-26

Components

Products in the NVD configurations · select one to filter the records

Windows Server 2019 6456 records CRITICAL Windows Server 2016 6401 records CRITICAL Windows Server 2012 5294 records CRITICAL Windows Server 2022 4946 records CRITICAL Windows 10 1809 4017 records CRITICAL Windows 10 21h2 3968 records CRITICAL Windows 10 22h2 3967 records CRITICAL Windows Server 2025 3632 records CRITICAL

Records

17 records in Raw Image Extension · all components

TI-2020-13065 CVE-2020-17086 · GHSA-6fj6-vxrv-q2xm

Raw Image Extension Remote Code Execution Vulnerability

MEDIUM 49

Raw Image Extension Remote Code Execution Vulnerability

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.04596 Published 2020-11-11 No fix listed

TI-2020-13058 CVE-2020-17078 · GHSA-j78q-9grv-2694

Raw Image Extension Remote Code Execution Vulnerability

MEDIUM 49

Raw Image Extension Remote Code Execution Vulnerability

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.03162 Published 2020-11-11 No fix listed

TI-2020-13059 CVE-2020-17079 · GHSA-r4pr-fjhx-f9hp

Raw Image Extension Remote Code Execution Vulnerability

MEDIUM 48

Raw Image Extension Remote Code Execution Vulnerability

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.03097 Published 2020-11-11 No fix listed

TI-2020-13061 CVE-2020-17082 · GHSA-q267-jq98-h563

Raw Image Extension Remote Code Execution Vulnerability

MEDIUM 47

Raw Image Extension Remote Code Execution Vulnerability

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.02908 Published 2020-11-11 No fix listed

TI-2021-19223 CVE-2021-43214 · GHSA-fq64-fvh6-9c68

Web Media Extensions Remote Code Execution Vulnerability

MEDIUM 46

Web Media Extensions Remote Code Execution Vulnerability

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01831 Published 2021-12-15 No fix listed

TI-2021-09580 CVE-2021-28468 · GHSA-xq32-4fhv-g5h5

Raw Image Extension Remote Code Execution Vulnerability

MEDIUM 43

Raw Image Extension Remote Code Execution Vulnerability

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.06314 Published 2021-04-13 No fix listed CWE-843

TI-2026-48947 CVE-2026-69649 · GHSA-q58j-6hvj-m4xq

Raw Image Extension Remote Code Execution Vulnerability

MEDIUM 42

Heap-based buffer overflow in Windows Raw Image Extension allows an unauthorized attacker to execute code over a network.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00819 Published 2026-09-08 Fixed in 2.4.24.0 CWE-122

TI-2026-73120 CVE-2026-96943 · GHSA-vxjm-6p2h-m9mf

Integer overflow in Windows Raw Image Extension allows code execution

MEDIUM 41

Integer overflow or wraparound in Windows Raw Image Extension allows an unauthorized attacker to execute code over a network.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00601 Published 2026-10-13 Fixed in 2.4.36.0 CWE-122

TI-2023-12841 CVE-2023-28291 · GHSA-x8xh-wwfm-qgh7

Raw Image Extension Remote Code Execution Vulnerability

LOW 39

Raw Image Extension Remote Code Execution Vulnerability

CVSS 3.1HIGH 8.4 Local No auth No interaction EPSS 0.00617 Published 2023-04-11 Fixed in 2.1.60611.0 CWE-20

TI-2021-09579 CVE-2021-28466 · GHSA-5v5f-4fc3-6gvr

Raw Image Extension Remote Code Execution Vulnerability

LOW 39

Raw Image Extension Remote Code Execution Vulnerability

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.02407 Published 2021-04-13 No fix listed

TI-2020-13060 CVE-2020-17081 · GHSA-46w7-72mj-jqwq

Microsoft Raw Image Extension Information Disclosure Vulnerability

LOW 39

Microsoft Raw Image Extension Information Disclosure Vulnerability

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.03682 Published 2020-11-11 No fix listed

TI-2022-21990 CVE-2022-44687 · GHSA-2753-2vv3-rp6p

Raw Image Extension Remote Code Execution Vulnerability

LOW 38

Raw Image Extension Remote Code Execution Vulnerability

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00812 Published 2022-12-13 Fixed in 2.0.32791.0

TI-2022-07423 CVE-2022-23300 · GHSA-vcw5-gvqx-q633

Raw Image Extension Remote Code Execution Vulnerability

LOW 38

Raw Image Extension Remote Code Execution Vulnerability

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.02258 Published 2022-03-09 Fixed in 2.0.30391.0

TI-2022-07418 CVE-2022-23295 · GHSA-h5p4-3w39-xhh2

Raw Image Extension Remote Code Execution Vulnerability

LOW 38

Raw Image Extension Remote Code Execution Vulnerability

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.02258 Published 2022-03-09 Fixed in 2.0.30391.0

TI-2023-15355 CVE-2023-32051 · GHSA-gj2g-329v-2396

Raw Image Extension Remote Code Execution Vulnerability

LOW 37

Raw Image Extension Remote Code Execution Vulnerability

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.0075 Published 2023-07-11 Fixed in 2.0.61662.0 CWE-190

TI-2023-12842 CVE-2023-28292 · GHSA-8m7v-4223-689g

Raw Image Extension Remote Code Execution Vulnerability

LOW 37

Raw Image Extension Remote Code Execution Vulnerability

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00598 Published 2023-04-11 Fixed in 2.1.60611.0 CWE-122

TI-2022-17729 CVE-2022-38011 · GHSA-gw9q-37r7-h423

Raw Image Extension Remote Code Execution Vulnerability

LOW 34

Raw Image Extension Remote Code Execution Vulnerability

CVSS 3.1HIGH 7.3 Local Low privileges User interaction EPSS 0.00918 Published 2022-09-13 Fixed in v2.0.32061.0

Open these records in search →

Critical	2330
High	10410
Medium	5035
Low	270
No CVSS	1