CVE-2021-43214: Microsoft raw image extension vulnerability

Microsoft · Raw Image Extension

Web Media Extensions Remote Code Execution Vulnerability

9.8 CVSS 3.1 Critical EPSS 1.7% · top 23.3%

9.8CVSS 3.1 base score, v2 7.5

1.7%EPSS exploitation probability, 30 days

NoNot in CISA KEV

1Affected product versions listed by NVD

2References

17 Jun 2026Last modified by NVD

Description

Web Media Extensions Remote Code Execution Vulnerability

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Affected products

1 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

Raw Image Extension Microsoft

References

Link	Tags
https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-43214	PatchVendor Advisory
https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-43214	PatchVendor Advisory

Track CVE-2021-43214 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

8.8CVE-2026-69649Microsoft raw image extension heap-based buffer overflow vulnerabilityHeap-based buffer overflow in Windows Raw Image Extension allows an unauthorized attacker to execute code over a network.EPSS 0.82%8 Sep 2026 7.8CVE-2023-32051Microsoft raw image extension integer overflow vulnerabilityRaw Image Extension Remote Code Execution VulnerabilityEPSS 0.75%11 Jul 2023 7.8CVE-2023-28291Microsoft raw image extension improper input validation vulnerabilityRaw Image Extension Remote Code Execution VulnerabilityEPSS 0.62%11 Apr 2023 7.8CVE-2023-28292Microsoft raw image extension heap-based buffer overflow vulnerabilityRaw Image Extension Remote Code Execution VulnerabilityEPSS 0.60%11 Apr 2023 7.8CVE-2022-44687Microsoft raw image extension vulnerabilityRaw Image Extension Remote Code Execution VulnerabilityEPSS 0.79%13 Dec 2022 7.8CVE-2022-23300Microsoft raw image extension vulnerabilityRaw Image Extension Remote Code Execution VulnerabilityEPSS 2.3%9 Mar 2022 7.8CVE-2022-23295Microsoft raw image extension vulnerabilityRaw Image Extension Remote Code Execution VulnerabilityEPSS 2.3%9 Mar 2022 7.8CVE-2021-28466Microsoft raw image extension vulnerabilityRaw Image Extension Remote Code Execution VulnerabilityEPSS 2.3%13 Apr 2021

Source: NIST National Vulnerability Database (record CVE-2021-43214), CISA KEV, FIRST EPSS (scores of 2026-09-26). This page is refreshed as NVD updates the record.