CVE-2023-32051: Microsoft raw image extension integer overflow vulnerability

Microsoft · Raw Image Extension

Raw Image Extension Remote Code Execution Vulnerability

7.8 CVSS 3.1 High EPSS 0.75% · top 46.9% CWE-190 · Integer overflow

7.8CVSS 3.1 base score

0.75%EPSS exploitation probability, 30 days

NoNot in CISA KEV

1Affected product versions listed by NVD

2References

17 Jun 2026Last modified by NVD

Description

Raw Image Extension Remote Code Execution Vulnerability

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Affected products

1 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

Raw Image Extension Microsoft

References

Link	Tags
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-32051	PatchVendor Advisory
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-32051	PatchVendor Advisory

Track CVE-2023-32051 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

9.8CVE-2021-43214Microsoft raw image extension vulnerabilityWeb Media Extensions Remote Code Execution VulnerabilityEPSS 1.7%15 Dec 2021 8.8CVE-2026-69649Microsoft raw image extension heap-based buffer overflow vulnerabilityHeap-based buffer overflow in Windows Raw Image Extension allows an unauthorized attacker to execute code over a network.EPSS 0.82%8 Sep 2026 7.8CVE-2023-28291Microsoft raw image extension improper input validation vulnerabilityRaw Image Extension Remote Code Execution VulnerabilityEPSS 0.62%11 Apr 2023 7.8CVE-2023-28292Microsoft raw image extension heap-based buffer overflow vulnerabilityRaw Image Extension Remote Code Execution VulnerabilityEPSS 0.60%11 Apr 2023 7.8CVE-2022-44687Microsoft raw image extension vulnerabilityRaw Image Extension Remote Code Execution VulnerabilityEPSS 0.79%13 Dec 2022 7.8CVE-2022-23300Microsoft raw image extension vulnerabilityRaw Image Extension Remote Code Execution VulnerabilityEPSS 2.3%9 Mar 2022 7.8CVE-2022-23295Microsoft raw image extension vulnerabilityRaw Image Extension Remote Code Execution VulnerabilityEPSS 2.3%9 Mar 2022 7.8CVE-2021-28466Microsoft raw image extension vulnerabilityRaw Image Extension Remote Code Execution VulnerabilityEPSS 2.3%13 Apr 2021

Source: NIST National Vulnerability Database (record CVE-2023-32051), CISA KEV, FIRST EPSS (scores of 2026-09-28). This page is refreshed as NVD updates the record.