{"history":[{"alert":0,"cve":"CVE-2026-100204","id":23038,"kind":"epss","observed_at":1794500401,"payload":"{\"date\": \"2026-11-12\", \"epss\": 0.00481, \"percentile\": 0.41978}"},{"alert":1,"cve":"CVE-2026-100204","id":21340,"kind":"cna","observed_at":1794500401,"payload":"{\"containers\": {\"adp\": [{\"metrics\": [{\"other\": {\"content\": {\"id\": \"CVE-2026-100204\", \"options\": [{\"Exploitation\": \"none\"}, {\"Automatable\": \"no\"}, {\"Technical Impact\": \"total\"}], \"role\": \"CISA Coordinator\", \"timestamp\": \"2026-11-10T21:19:32.295304Z\", \"version\": \"2.0.3\"}, \"type\": \"ssvc\"}}], \"providerMetadata\": {\"dateUpdated\": \"2026-11-10T21:21:37.047Z\", \"orgId\": \"134c704f-9b21-4f2e-91b3-4a467353bcc0\", \"shortName\": \"CISA-ADP\"}, \"title\": \"CISA ADP Vulnrichment\"}], \"cna\": {\"affected\": [{\"platforms\": [\"Windows 10 version 1809\", \"Windows 10 version 21H2\", \"Windows 10 version 22H2\", \"Windows 11 version 23H2\", \"Windows 11 version 24H2\", \"Windows 11 version 25H2\", \"Windows 11 version 26H1\", \"Windows 11 version 26H2\"], \"product\": \"HEIF Image Extension\", \"vendor\": \"Microsoft\", \"versions\": [{\"lessThan\": \"1.2.62.0\", \"status\": \"affected\", \"version\": \"1.0.0.0\", \"versionType\": \"custom\"}]}], \"cpeApplicability\": [{\"nodes\": [{\"cpeMatch\": [{\"criteria\": \"cpe:2.3:a:microsoft:heif_image_extension:*:*:*:*:*:*:*:*\", \"versionEndExcluding\": \"1.2.62.0\", \"versionStartIncluding\": \"1.0.0.0\", \"vulnerable\": true}], \"negate\": false, \"operator\": \"OR\"}]}], \"datePublic\": \"2026-11-10T16:00:00.000Z\", \"descriptions\": [{\"lang\": \"en-US\", \"value\": \"Use after free in HEIF Image Extensions allows an unauthorized attacker to execute code locally.\"}], \"metrics\": [{\"cvssV3_1\": {\"baseScore\": 7, \"baseSeverity\": \"HIGH\", \"vectorString\": \"CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C\", \"version\": \"3.1\"}, \"format\": \"CVSS\", \"scenarios\": [{\"lang\": \"en-US\", \"value\": \"GENERAL\"}]}], \"problemTypes\": [{\"descriptions\": [{\"cweId\": \"CWE-416\", \"description\": \"CWE-416: Use After Free\", \"lang\": \"en-US\", \"type\": \"CWE\"}]}], \"providerMetadata\": {\"dateUpdated\": \"2026-11-12T15:40:22.964Z\", \"orgId\": \"f38d906d-7342-40ea-92c1-6c4a2c6478c8\", \"shortName\": \"microsoft\"}, \"references\": [{\"name\": \"HEIF Image Extensions Remote Code Execution Vulnerability\", \"tags\": [\"vendor-advisory\", \"patch\"], \"url\": \"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-100204\"}], \"title\": \"HEIF Image Extensions Remote Code Execution Vulnerability\"}}, \"cveMetadata\": {\"assignerOrgId\": \"f38d906d-7342-40ea-92c1-6c4a2c6478c8\", \"assignerShortName\": \"microsoft\", \"cveId\": \"CVE-2026-100204\", \"datePublished\": \"2026-11-10T18:15:06.246Z\", \"dateReserved\": \"2026-09-25T15:11:44.539Z\", \"dateUpdated\": \"2026-11-12T15:40:22.964Z\", \"state\": \"PUBLISHED\"}, \"dataType\": \"CVE_RECORD\", \"dataVersion\": \"5.2\"}"},{"alert":1,"cve":"CVE-2026-100204","id":21073,"kind":"cna","observed_at":1794392402,"payload":"{\"containers\": {\"adp\": [{\"metrics\": [{\"other\": {\"content\": {\"id\": \"CVE-2026-100204\", \"options\": [{\"Exploitation\": \"none\"}, {\"Automatable\": \"no\"}, {\"Technical Impact\": \"total\"}], \"role\": \"CISA Coordinator\", \"timestamp\": \"2026-11-10T21:19:32.295304Z\", \"version\": \"2.0.3\"}, \"type\": \"ssvc\"}}], \"providerMetadata\": {\"dateUpdated\": \"2026-11-10T21:21:37.047Z\", \"orgId\": \"134c704f-9b21-4f2e-91b3-4a467353bcc0\", \"shortName\": \"CISA-ADP\"}, \"title\": \"CISA ADP Vulnrichment\"}], \"cna\": {\"affected\": [{\"platforms\": [\"Windows 10 version 1809\", \"Windows 10 version 21H2\", \"Windows 10 version 22H2\", \"Windows 11 version 23H2\", \"Windows 11 version 24H2\", \"Windows 11 version 25H2\", \"Windows 11 version 26H1\", \"Windows 11 version 26H2\"], \"product\": \"HEIF Image Extension\", \"vendor\": \"Microsoft\", \"versions\": [{\"lessThan\": \"1.2.62.0\", \"status\": \"affected\", \"version\": \"1.0.0.0\", \"versionType\": \"custom\"}]}], \"cpeApplicability\": [{\"nodes\": [{\"cpeMatch\": [{\"criteria\": \"cpe:2.3:a:microsoft:heif_image_extension:*:*:*:*:*:*:*:*\", \"versionEndExcluding\": \"1.2.62.0\", \"versionStartIncluding\": \"1.0.0.0\", \"vulnerable\": true}], \"negate\": false, \"operator\": \"OR\"}]}], \"datePublic\": \"2026-11-10T16:00:00.000Z\", \"descriptions\": [{\"lang\": \"en-US\", \"value\": \"Use after free in HEIF Image Extensions allows an unauthorized attacker to execute code locally.\"}], \"metrics\": [{\"cvssV3_1\": {\"baseScore\": 7, \"baseSeverity\": \"HIGH\", \"vectorString\": \"CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C\", \"version\": \"3.1\"}, \"format\": \"CVSS\", \"scenarios\": [{\"lang\": \"en-US\", \"value\": \"GENERAL\"}]}], \"problemTypes\": [{\"descriptions\": [{\"cweId\": \"CWE-416\", \"description\": \"CWE-416: Use After Free\", \"lang\": \"en-US\", \"type\": \"CWE\"}]}], \"providerMetadata\": {\"dateUpdated\": \"2026-11-10T23:46:30.653Z\", \"orgId\": \"f38d906d-7342-40ea-92c1-6c4a2c6478c8\", \"shortName\": \"microsoft\"}, \"references\": [{\"name\": \"HEIF Image Extensions Remote Code Execution Vulnerability\", \"tags\": [\"vendor-advisory\", \"patch\"], \"url\": \"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-100204\"}], \"title\": \"HEIF Image Extensions Remote Code Execution Vulnerability\"}}, \"cveMetadata\": {\"assignerOrgId\": \"f38d906d-7342-40ea-92c1-6c4a2c6478c8\", \"assignerShortName\": \"microsoft\", \"cveId\": \"CVE-2026-100204\", \"datePublished\": \"2026-11-10T18:15:06.246Z\", \"dateReserved\": \"2026-09-25T15:11:44.539Z\", \"dateUpdated\": \"2026-11-10T23:46:30.653Z\", \"state\": \"PUBLISHED\"}, \"dataType\": \"CVE_RECORD\", \"dataVersion\": \"5.2\"}"}],"record":{"affected":[{"platforms":["Windows 10 version 1809","Windows 10 version 21H2","Windows 10 version 22H2","Windows 11 version 23H2","Windows 11 version 24H2","Windows 11 version 25H2","Windows 11 version 26H1","Windows 11 version 26H2"],"product":"HEIF Image Extension","vendor":"Microsoft","versions":[{"lessThan":"1.2.62.0","status":"affected","version":"1.0.0.0","versionType":"custom"}]}],"cna":{"containers":{"adp":[{"metrics":[{"other":{"content":{"id":"CVE-2026-100204","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"total"}],"role":"CISA Coordinator","timestamp":"2026-11-10T21:19:32.295304Z","version":"2.0.3"},"type":"ssvc"}}],"providerMetadata":{"dateUpdated":"2026-11-10T21:21:37.047Z","orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP"},"title":"CISA ADP Vulnrichment"}],"cna":{"affected":[{"platforms":["Windows 10 version 1809","Windows 10 version 21H2","Windows 10 version 22H2","Windows 11 version 23H2","Windows 11 version 24H2","Windows 11 version 25H2","Windows 11 version 26H1","Windows 11 version 26H2"],"product":"HEIF Image Extension","vendor":"Microsoft","versions":[{"lessThan":"1.2.62.0","status":"affected","version":"1.0.0.0","versionType":"custom"}]}],"cpeApplicability":[{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:a:microsoft:heif_image_extension:*:*:*:*:*:*:*:*","versionEndExcluding":"1.2.62.0","versionStartIncluding":"1.0.0.0","vulnerable":true}],"negate":false,"operator":"OR"}]}],"datePublic":"2026-11-10T16:00:00.000Z","descriptions":[{"lang":"en-US","value":"Use after free in HEIF Image Extensions allows an unauthorized attacker to execute code locally."}],"metrics":[{"cvssV3_1":{"baseScore":7,"baseSeverity":"HIGH","vectorString":"CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","version":"3.1"},"format":"CVSS","scenarios":[{"lang":"en-US","value":"GENERAL"}]}],"problemTypes":[{"descriptions":[{"cweId":"CWE-416","description":"CWE-416: Use After Free","lang":"en-US","type":"CWE"}]}],"providerMetadata":{"dateUpdated":"2026-11-12T15:40:22.964Z","orgId":"f38d906d-7342-40ea-92c1-6c4a2c6478c8","shortName":"microsoft"},"references":[{"name":"HEIF Image Extensions Remote Code Execution Vulnerability","tags":["vendor-advisory","patch"],"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-100204"}],"title":"HEIF Image Extensions Remote Code Execution Vulnerability"}},"cveMetadata":{"assignerOrgId":"f38d906d-7342-40ea-92c1-6c4a2c6478c8","assignerShortName":"microsoft","cveId":"CVE-2026-100204","datePublished":"2026-11-10T18:15:06.246Z","dateReserved":"2026-09-25T15:11:44.539Z","dateUpdated":"2026-11-12T15:40:22.964Z","state":"PUBLISHED"},"dataType":"CVE_RECORD","dataVersion":"5.2"},"cna_checked":1794500401,"cve":"CVE-2026-100204","description":"Use after free in HEIF Image Extensions allows an unauthorized attacker to execute code locally.","epss":{"date":"2026-11-12","epss":0.00481,"percentile":0.41978},"epss_checked":1794522003,"first_seen":1794378631,"kev":null,"kev_checked":1794522003,"products":"Microsoft HEIF Image Extension","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-100204"],"score":{"baseScore":7,"baseSeverity":"HIGH","provider":"microsoft","vectorString":"CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","version":"3.1"},"solutions":"","state":"PUBLISHED","title":"HEIF Image Extensions Remote Code Execution Vulnerability","updated_at":1794500401,"workarounds":""},"sources":[{"canonical_url":"https://www.bleepingcomputer.com/news/microsoft/microsoft-november-2026-patch-tuesday-fixes-1-235-flaws-outlook-zero-day/","id":375,"publisher":"BleepingComputer","title":"Microsoft November 2026 Patch Tuesday fixes 1,235 flaws, Outlook zero-day"}]}