CVE-2026-70351: microsoft webp image extension – CVSS 8.8 · Watchpost