WI
Product
WebP Image Extension
by Microsoft · last CVE Sep 8, 2026
On CISA KEVExploited in the wild
3
CVEs
1
On KEV
8.8
Max CVSS
0
New 30D
Severity mix
Critical 0High 2Medium 1Low 0
Watch

Add WebP Image Extension to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2023-4863
In wildKEV
8.8
100%
Sep 12
Google Chromium WebP Heap-Based Buffer Overflow Vulnerability
Affected: before 1.0.62681.0
CVE-2026-70351
8.8
1%
Sep 8
Microsoft WebP Image Extension Remote Code Execution Vulnerability
Affected: 1.0.0.0 before 1.2.31.0
Showing 2