{"id":"CVE-2026-96202","published":"2026-10-13T19:21:46.520","lastModified":"2026-10-13T20:19:12.407","description":"Heap-based buffer overflow in Windows Raw Image Extension allows an unauthorized attacker to execute code over a network.","cvssScore":8.8,"cvssSeverity":"HIGH","cvssVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cwes":["CWE-122"],"vendors":[],"products":[],"references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96202","tags":[]}],"exploitRefs":[],"hasPoc":false,"ai":{"summary":"A heap-based buffer overflow in Windows Raw Image Extension allows remote attackers to execute arbitrary code when processing specially crafted image files. This vulnerability is particularly concerning because it can be exploited over the network without any user interaction, making it highly suitable for automated attacks.","exploitability":"Exploitation is relatively straightforward with no special preconditions required, as the vulnerability occurs during image file processing and can be triggered remotely through network shares or web services that handle raw image files.","blast_radius":"The impact could be significant across Windows environments that process raw image files from untrusted sources, potentially allowing attackers to gain full system compromise on affected systems without user interaction.","remediation":"Deploy the Windows Update KB5042819 or later which includes the fix for this vulnerability in the Windows Raw Image Extension component.","detection":"No reliable host or network indicator is derivable from the published description.","tags":["rce","image-processing","windows"],"model":"garnet-coder","analyzedAt":"2026-10-18T10:18:01.368Z"}}