{"history":[{"alert":0,"cve":"CVE-2026-114169","id":23069,"kind":"epss","observed_at":1794500401,"payload":"{\"date\": \"2026-11-12\", \"epss\": 0.00989, \"percentile\": 0.62977}"},{"alert":1,"cve":"CVE-2026-114169","id":21221,"kind":"cna","observed_at":1794478802,"payload":"{\"containers\": {\"adp\": [{\"metrics\": [{\"other\": {\"content\": {\"id\": \"CVE-2026-114169\", \"options\": [{\"Exploitation\": \"none\"}, {\"Automatable\": \"no\"}, {\"Technical Impact\": \"total\"}], \"role\": \"CISA Coordinator\", \"timestamp\": \"2026-11-10T20:00:54.381236Z\", \"version\": \"2.0.3\"}, \"type\": \"ssvc\"}}], \"providerMetadata\": {\"dateUpdated\": \"2026-11-10T20:09:24.539Z\", \"orgId\": \"134c704f-9b21-4f2e-91b3-4a467353bcc0\", \"shortName\": \"CISA-ADP\"}, \"title\": \"CISA ADP Vulnrichment\"}], \"cna\": {\"affected\": [{\"platforms\": [\"Windows 10 version 1809\", \"Windows 10 version 21H2\", \"Windows 10 version 22H2\", \"Windows 11 version 23H2\", \"Windows 11 version 24H2\", \"Windows 11 version 25H2\", \"Windows 11 version 26H1\", \"Windows 11 version 26H2\"], \"product\": \"Raw Image Extension\", \"vendor\": \"Microsoft\", \"versions\": [{\"lessThan\": \"publication\", \"status\": \"affected\", \"version\": \"2.1.0.0\", \"versionType\": \"custom\"}]}], \"cpeApplicability\": [{\"nodes\": [{\"cpeMatch\": [{\"criteria\": \"cpe:2.3:a:microsoft:raw_image_extension:*:*:*:*:*:*:*:*\", \"versionEndExcluding\": \"publication\", \"versionStartIncluding\": \"2.1.0.0\", \"vulnerable\": true}], \"negate\": false, \"operator\": \"OR\"}]}], \"datePublic\": \"2026-11-10T16:00:00.000Z\", \"descriptions\": [{\"lang\": \"en-US\", \"value\": \"Heap-based buffer overflow in Windows Raw Image Extension allows an unauthorized attacker to execute code over a network.\"}], \"metrics\": [{\"cvssV3_1\": {\"baseScore\": 8.8, \"baseSeverity\": \"HIGH\", \"vectorString\": \"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C\", \"version\": \"3.1\"}, \"format\": \"CVSS\", \"scenarios\": [{\"lang\": \"en-US\", \"value\": \"GENERAL\"}]}], \"problemTypes\": [{\"descriptions\": [{\"cweId\": \"CWE-122\", \"description\": \"CWE-122: Heap-based Buffer Overflow\", \"lang\": \"en-US\", \"type\": \"CWE\"}]}], \"providerMetadata\": {\"dateUpdated\": \"2026-11-11T17:10:24.699Z\", \"orgId\": \"f38d906d-7342-40ea-92c1-6c4a2c6478c8\", \"shortName\": \"microsoft\"}, \"references\": [{\"name\": \"Windows Raw Image Extension Remote Code Execution Vulnerability\", \"tags\": [\"vendor-advisory\", \"patch\"], \"url\": \"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-114169\"}], \"title\": \"Windows Raw Image Extension Remote Code Execution Vulnerability\"}}, \"cveMetadata\": {\"assignerOrgId\": \"f38d906d-7342-40ea-92c1-6c4a2c6478c8\", \"assignerShortName\": \"microsoft\", \"cveId\": \"CVE-2026-114169\", \"datePublished\": \"2026-11-10T18:15:15.498Z\", \"dateReserved\": \"2026-10-20T21:56:39.318Z\", \"dateUpdated\": \"2026-11-11T17:10:24.699Z\", \"state\": \"PUBLISHED\"}, \"dataType\": \"CVE_RECORD\", \"dataVersion\": \"5.2\"}"}],"record":{"affected":[{"platforms":["Windows 10 version 1809","Windows 10 version 21H2","Windows 10 version 22H2","Windows 11 version 23H2","Windows 11 version 24H2","Windows 11 version 25H2","Windows 11 version 26H1","Windows 11 version 26H2"],"product":"Raw Image Extension","vendor":"Microsoft","versions":[{"lessThan":"publication","status":"affected","version":"2.1.0.0","versionType":"custom"}]}],"cna":{"containers":{"adp":[{"metrics":[{"other":{"content":{"id":"CVE-2026-114169","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"total"}],"role":"CISA Coordinator","timestamp":"2026-11-10T20:00:54.381236Z","version":"2.0.3"},"type":"ssvc"}}],"providerMetadata":{"dateUpdated":"2026-11-10T20:09:24.539Z","orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP"},"title":"CISA ADP Vulnrichment"}],"cna":{"affected":[{"platforms":["Windows 10 version 1809","Windows 10 version 21H2","Windows 10 version 22H2","Windows 11 version 23H2","Windows 11 version 24H2","Windows 11 version 25H2","Windows 11 version 26H1","Windows 11 version 26H2"],"product":"Raw Image Extension","vendor":"Microsoft","versions":[{"lessThan":"publication","status":"affected","version":"2.1.0.0","versionType":"custom"}]}],"cpeApplicability":[{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:a:microsoft:raw_image_extension:*:*:*:*:*:*:*:*","versionEndExcluding":"publication","versionStartIncluding":"2.1.0.0","vulnerable":true}],"negate":false,"operator":"OR"}]}],"datePublic":"2026-11-10T16:00:00.000Z","descriptions":[{"lang":"en-US","value":"Heap-based buffer overflow in Windows Raw Image Extension allows an unauthorized attacker to execute code over a network."}],"metrics":[{"cvssV3_1":{"baseScore":8.8,"baseSeverity":"HIGH","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","version":"3.1"},"format":"CVSS","scenarios":[{"lang":"en-US","value":"GENERAL"}]}],"problemTypes":[{"descriptions":[{"cweId":"CWE-122","description":"CWE-122: Heap-based Buffer Overflow","lang":"en-US","type":"CWE"}]}],"providerMetadata":{"dateUpdated":"2026-11-11T17:10:24.699Z","orgId":"f38d906d-7342-40ea-92c1-6c4a2c6478c8","shortName":"microsoft"},"references":[{"name":"Windows Raw Image Extension Remote Code Execution Vulnerability","tags":["vendor-advisory","patch"],"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-114169"}],"title":"Windows Raw Image Extension Remote Code Execution Vulnerability"}},"cveMetadata":{"assignerOrgId":"f38d906d-7342-40ea-92c1-6c4a2c6478c8","assignerShortName":"microsoft","cveId":"CVE-2026-114169","datePublished":"2026-11-10T18:15:15.498Z","dateReserved":"2026-10-20T21:56:39.318Z","dateUpdated":"2026-11-11T17:10:24.699Z","state":"PUBLISHED"},"dataType":"CVE_RECORD","dataVersion":"5.2"},"cna_checked":1794478802,"cve":"CVE-2026-114169","description":"Heap-based buffer overflow in Windows Raw Image Extension allows an unauthorized attacker to execute code over a network.","epss":{"date":"2026-11-12","epss":0.00989,"percentile":0.62977},"epss_checked":1794522003,"first_seen":1794467710,"kev":null,"kev_checked":1794522003,"products":"Microsoft Raw Image Extension","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-114169"],"score":{"baseScore":8.8,"baseSeverity":"HIGH","provider":"microsoft","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","version":"3.1"},"solutions":"","state":"PUBLISHED","title":"Windows Raw Image Extension Remote Code Execution Vulnerability","updated_at":1794500401,"workarounds":""},"sources":[{"canonical_url":"https://blog.talosintelligence.com/microsoft-patch-tuesday-for-november-2026/","id":418,"publisher":"Cisco Talos","title":"Microsoft Patch Tuesday for November 2026 \u2014 Snort rules and prominent vulnerabilities"}]}