CVE-2026-96202CriticalCVSS 8.8
Windows Raw Image Extension Remote Code Execution Vulnerability
🔗 CVE IDs covered (1)
📋 Description
Heap-based buffer overflow in Windows Raw Image Extension allows an unauthorized attacker to execute code over a network.
🎯 Affected products25
- Microsoft Edge (Chromium-based)
- Raw Image Extension on Windows 10 Version 1607 for 32-bit Systems
- Raw Image Extension on Windows 10 Version 1607 for x64-based Systems
- Raw Image Extension on Windows 10 Version 1809 for 32-bit Systems
- Raw Image Extension on Windows 10 Version 1809 for ARM64-based Systems
- Raw Image Extension on Windows 10 Version 1809 for HoloLens
- Raw Image Extension on Windows 10 Version 1809 for x64-based Systems
- Raw Image Extension on Windows 10 Version 1909 for 32-bit Systems
- Raw Image Extension on Windows 10 Version 1909 for ARM64-based Systems
- Raw Image Extension on Windows 10 Version 1909 for x64-based Systems
- Raw Image Extension on Windows 10 Version 20H2 for 32-bit Systems
- Raw Image Extension on Windows 10 Version 20H2 for ARM64-based Systems
- Raw Image Extension on Windows 10 Version 21H1 for 32-bit Systems
- Raw Image Extension on Windows 10 Version 21H1 for ARM64-based Systems
- Raw Image Extension on Windows 10 Version 21H1 for x64-based Systems
- Raw Image Extension on Windows 10 Version 21H2 for 32-bit Systems
- Raw Image Extension on Windows 10 Version 21H2 for ARM64-based Systems
- Raw Image Extension on Windows 10 Version 21H2 for x64-based Systems
- Raw Image Extension on Windows 10 for 32-bit Systems
- Raw Image Extension on Windows 10 for x64-based Systems
- Raw Image Extension on Windows 11 Version 26H2 for ARM64-based Systems
- Raw Image Extension on Windows 11 Version 26H2 for x64-based Systems
- Raw Image Extension on Windows 11 version 21H2 for ARM64-based Systems
- Raw Image Extension on Windows 11 version 21H2 for x64-based Systems
- Raw Image Extension on Windows 11 version 26H2
✅ Remediation
KBRelease Notes (Security Update) — fixed build 2.4.36.0 KBRelease Notes (Security Update) — fixed build 2.5.35.0 KBRelease Notes (Security Update) — fixed build 154.0.4258.37 KBRelease Notes (Security Update) — fixed build 154.0.4258.38
🔗 References (4)
- advisoryhttps://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96202
- referencehttps://support.microsoft.com/en-us/accounts-billing/get-updates-for-apps-and-games-in-microsoft-store
- patchhttps://catalog.update.microsoft.com/Search.aspx?q=Edge-Stable
- referencehttps://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security