Microsoft Webp Image Extension vulnerabilities

🔔 Create alert RSS Version checker

Published CVEs affecting Microsoft Webp Image Extension: 2 record(s), with affected versions and fixes.
cpe:2.3:a:microsoft:webp_image_extension

CVE-2026-70351 High · 8.8 CWE-122 Sep 8, 2026

Microsoft WebP Image Extension Remote Code Execution Vulnerability

Integer overflow or wraparound in Microsoft WebP Image Extension allows an unauthorized attacker to execute code over a network.

CVE-2023-4863 High · 8.8 KEV High · 62 Public exploit CWE-787 Sep 12, 2023

Google Chromium WebP Heap-Based Buffer Overflow Vulnerability

Heap buffer overflow in libwebp in Google Chrome prior to 116.0.5845.187 and libwebp 1.3.2 allowed a remote attacker to perform an out of bounds memory write via a crafted HTML page. (Chromium security severity: Critical)