Raw Image Extension Remote Code Execution Vulnerability
CVE-2023-28291

8.4HIGH

Key Information:

Vendor
Microsoft
Vendor
CVE Published:
11 April 2023

Summary

The Raw Image Extension by Microsoft presents a vulnerability that allows remote code execution, potentially enabling an attacker to execute arbitrary code on the affected system. This security flaw could lead to significant risks if exploited, as malicious actors may gain control over the system's functions or data. Users are encouraged to apply the necessary updates and patches to mitigate potential threats associated with this vulnerability.

Affected Version(s)

Raw Image Extension Windows 10 Version 20H2 for 32-bit Systems 2.1.0.0 < 2.1.60611.0

References

CVSS V3.1

Score:
8.4
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.