Skip to content

Known vulnerabilities in Microsoft HEIF Image Extension

Is your version affected?

CVE Summary Score Published
CVE-2026-81353 Heap-based buffer overflow in Microsoft Windows Codecs Library allows an unauthorized attacker to execute code locally 7.8 High Sep 8, 2026
CVE-2022-24457 HEIF Image Extensions Remote Code Execution Vulnerability 7.8 High Mar 9, 2022
CVE-2020-17101 HEIF Image Extensions Remote Code Execution Vulnerability 7.8 High Nov 11, 2020

Other Microsoft products