CVE-2026-70019

Windows hard link in Windows Compressed Folder allows an unauthorized attacker to disclose information over a network...

CVE-2026-69496

Heap-based buffer overflow in Windows Compressed Folder allows an unauthorized attacker to execute code over a network...

CVE-2026-69445

Improper limitation of a pathname to a restricted directory 'path traversal' in Windows Compressed Folder allows an authorized attacker to elevate privileges locally...

CVE-2026-69445

CVE-2026-69445 is a local privilege escalation vulnerability in Windows Compressed Folder caused by an improper limitation of a pathname to a restricted directory (path traversal ). An authorized attacker with low privileges can exploit this locally without user interaction to achieve high impact...

EUVD-2026-73508

Improper limitation of a pathname to a restricted directory 'path traversal' in Windows Compressed Folder allows an authorized attacker to elevate privileges locally...

EUVD-2026-73345

Windows hard link in Windows Compressed Folder allows an unauthorized attacker to disclose information over a network...

CVE-2026-70019

CVE-2026-70019 is an information disclosure vulnerability in Windows Compressed Folder caused by a hard link mechanism that allows an unauthorized attacker to disclose information over a network. The vulnerability requires user interaction and no prior privileges (CVSS 3.1: 6.5 MEDIUM , C:H). CIS...

CVE-2026-69496

CVE-2026-69496 is a heap-based buffer overflow in Windows Compressed Folder that enables an unauthorized, unauthenticated attacker to achieve remote code execution over a network . Microsoft rates it CVSS 9.8 (Critical) with high impact to confidentiality, integrity, and availability. CISA's SSVC...

EUVD-2026-72994

Heap-based buffer overflow in Windows Compressed Folder allows an unauthorized attacker to execute code over a network...

Windows Compressed Folder Elevation of Privilege Vulnerability

Improper limitation of a pathname to a restricted directory 'path traversal' in Windows Compressed Folder allows an authorized attacker to elevate privileges locally...

PT-2024-6181 · Microsoft · Windows Compressed Folder +1

Name of the Vulnerable Software and Affected Versions: Windows Compressed Folder affected versions not specified Description: The issue is related to incorrect external management of a file's name or path in Windows operating systems. This can allow a remote attacker to gain unauthorized access t...

Microsoft Windows Compressed Folder 安全漏洞

Microsoft Windows Compressed Folder is an application from Microsoft Corporation USA. A security vulnerability exists in Microsoft Windows Compressed Folder. An attacker could exploit the vulnerability to remotely execute code. The following products and versions are affected:Windows 11 Version...

PT-2024-2252 · Microsoft · Windows Compressed Folder +1

Name of the Vulnerable Software and Affected Versions: Windows Compressed Folder affected versions not specified Description: The issue is related to insufficient input validation in the Windows Compressed Folder component, which can be exploited by creating a specially crafted file. This allows ...

Remote code execution

Windows Compressed Folder Remote Code Execution Vulnerability...

Microsoft Windows Compressed Folder Security Vulnerability

Microsoft Windows is a suite of operating systems for use on personal devices from Microsoft Corporation USA. A security vulnerability exists in Microsoft Windows Compressed Folder. An attacker could exploit this vulnerability to remotely execute code. The following products and versions are...