Search threats, CVEs… ⌘K

Back to vendor advisories

Microsoft Security Response CenterCVE-2026-96202

Windows Raw Image Extension Remote Code Execution Vulnerability

CriticalVendor CVSS 8.8 / 10 1 CVE Published Oct 16, 2026 at 7:00 AM UTC

Get alerts for Raw Image Extension on Windows

Summary

Heap-based buffer overflow in Windows Raw Image Extension allows an unauthorized attacker to execute code over a network.

Products covered

Raw Image Extension on Windows 10 Version 1607 for x64-based Systems
Raw Image Extension on Windows 10 Version 1607 for 32-bit Systems
Raw Image Extension on Windows 10 for x64-based Systems
Raw Image Extension on Windows 10 for 32-bit Systems
Raw Image Extension on Windows 10 Version 21H2 for x64-based Systems
Raw Image Extension on Windows 10 Version 21H2 for ARM64-based Systems
Raw Image Extension on Windows 10 Version 21H2 for 32-bit Systems
Raw Image Extension on Windows 11 version 21H2 for ARM64-based Systems

Show 16 more products

Raw Image Extension on Windows 11 version 21H2 for x64-based Systems
Raw Image Extension on Windows 10 Version 20H2 for ARM64-based Systems
Raw Image Extension on Windows 10 Version 20H2 for 32-bit Systems
Raw Image Extension on Windows 10 Version 21H1 for 32-bit Systems
Raw Image Extension on Windows 10 Version 21H1 for ARM64-based Systems
Raw Image Extension on Windows 10 Version 21H1 for x64-based Systems
Raw Image Extension on Windows 10 Version 1909 for ARM64-based Systems
Raw Image Extension on Windows 10 Version 1909 for x64-based Systems
Raw Image Extension on Windows 10 Version 1909 for 32-bit Systems
Raw Image Extension on Windows 10 Version 1809 for HoloLens
Raw Image Extension on Windows 10 Version 1809 for ARM64-based Systems
Raw Image Extension on Windows 10 Version 1809 for x64-based Systems
Raw Image Extension on Windows 10 Version 1809 for 32-bit Systems
Raw Image Extension on Windows 11 version 26H2
Raw Image Extension on Windows 11 Version 26H2 for ARM64-based Systems
Raw Image Extension on Windows 11 Version 26H2 for x64-based Systems

Remediation

Release Notes

Vendor-listed fixes

2.4.36.0
2.5.35.0

CVEs in this advisory 1

Update history

What changed in later vendor updates

SecurityAlert records field-level changes from the point we begin following a bulletin. Earlier vendor changes may not have a field-by-field record.

Oct 16, 2026 at 5:50 PM UTC
- The vendor changed the advisory's last-updated date.

Updates

Oct 13, 2026 at 10:55 PM UTC
Added to SecurityAlert
We collected the advisory from the official source.
Oct 16, 2026 at 7:00 AM UTC
Published by Microsoft Security Response Center
The publication date reported by the vendor.
Oct 21, 2026 at 1:15 AM UTC
Confirmed at the source
Our collector saw this advisory during a later source check.

Source

Details collected from Microsoft Security Response Center.

Vendor: Microsoft Security Response Center
Advisory ID: CVE-2026-96202
Last source check: Oct 21, 2026 at 1:25 PM UTC

Official bulletin How SecurityAlert builds this record

Your environment

Check the systems you actually run

A vendor advisory can tell you what may be affected. It cannot tell you whether that product and version are installed in your environment.

Confirm the product and installed version.
Read the vendor's prerequisites and exceptions.
Test the update or mitigation through your normal change process.

Watch Raw Image Extension on Windows

Keep following

Get new Microsoft Security Response Center advisories

Use the vendor-specific RSS feed or set up alerts for a product your team relies on.

Follow this vendor's RSS feed