Microsoft Webp Image Extension — known CVE vulnerabilities

Every CVE whose affected-product data names Microsoft Webp Image Extension, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (2)

• CVE-2023-4863 — CVSS 8.8 (high) — actively exploited: Heap buffer overflow in libwebp in Google Chrome prior to 116.0.5845.187 and libwebp 1.3.2 allowed a remote attacker to perform an out of…
• CVE-2020-17102 — CVSS 5.5 (medium): WebP Image Extensions Information Disclosure Vulnerability