CVE-2026-96943
8.8HighPublished 13 Oct 2026 · NVD status: Undergoing Analysis · AI triage by gemini-3.8-flash
- Attack vector
- Network
- Complexity
- Low
- Privileges needed
- None
- User interaction
- Required
- Impact
- Full C/I/A compromise
- Weakness
- CWE-122, CWE-190
Impact
Remote attackers can execute arbitrary code on the target system. Exploitation requires an unauthenticated user to open or process a maliciously crafted raw image file.
Root cause
An integer overflow or wraparound in the Windows Raw Image Extension leads to a heap-based buffer overflow.
Affected systems
Windows Raw Image Extension; exact version numbers are not listed — check the vendor advisory.
CVSS v3.1 · CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Fix & remediation
Update the Raw Image Extension package via the Microsoft Store or your enterprise app management tool. If updates cannot be immediately applied, temporarily uninstall the extension or restrict users from downloading untrusted image formats.
$ winget upgrade "Raw Image Extension"AI-suggested. Run it in staging first and check it against the vendor advisory. Why?
NVD description
Integer overflow or wraparound in Windows Raw Image Extension allows an unauthorized attacker to execute code over a network.