Microsoft WebP Image Extension < 1.2.31.0 RCE (CVE-2026-70351) (September 2026)

Language:

Version 1.3 Sep 18, 2026, 11:05 PM Plugin metadata (Add IAVM Info) Plugin Feed: 202609182305
Version 1.2 Sep 18, 2026, 2:17 PM CVSS temporal metrics ("CVSSv2 temporal vector" set to "CVSS2#E:U/RL:OF/RC:C") CVSS temporal metrics ("CVSSv3 temporal vector" set to "CVSS:3.0/E:U/RL:O/RC:C") Exploit attributes ("Exploit available" set to "False") Exploit attributes ("Exploitability ease" set to "No known exploits are available") Plugin Feed: 202609181417
Version 1.1 Sep 17, 2026, 5:47 PM New Plugin Feed: 202609171747

* Changelogs are generally available for changes made after Nov 1, 2022