40 matches found
CVE-2026-70019
Windows hard link in Windows Compressed Folder allows an unauthorized attacker to disclose information over a network...
CVE-2026-69496
Heap-based buffer overflow in Windows Compressed Folder allows an unauthorized attacker to execute code over a network...
CVE-2026-69445
Improper limitation of a pathname to a restricted directory 'path traversal' in Windows Compressed Folder allows an authorized attacker to elevate privileges locally...
EUVD-2026-73508
Improper limitation of a pathname to a restricted directory 'path traversal' in Windows Compressed Folder allows an authorized attacker to elevate privileges locally...
CVE-2026-69445
CVE-2026-69445 is a local privilege escalation vulnerability in Windows Compressed Folder caused by an improper limitation of a pathname to a restricted directory (path traversal ). An authorized attacker with low privileges can exploit this locally without user interaction to achieve high impact...
EUVD-2026-73345
Windows hard link in Windows Compressed Folder allows an unauthorized attacker to disclose information over a network...
CVE-2026-70019
CVE-2026-70019 is an information disclosure vulnerability in Windows Compressed Folder caused by a hard link mechanism that allows an unauthorized attacker to disclose information over a network. The vulnerability requires user interaction and no prior privileges (CVSS 3.1: 6.5 MEDIUM , C:H). CIS...
CVE-2026-69496
CVE-2026-69496 is a heap-based buffer overflow in Windows Compressed Folder that enables an unauthorized, unauthenticated attacker to achieve remote code execution over a network . Microsoft rates it CVSS 9.8 (Critical) with high impact to confidentiality, integrity, and availability. CISA's SSVC...
EUVD-2026-72994
Heap-based buffer overflow in Windows Compressed Folder allows an unauthorized attacker to execute code over a network...
Windows Compressed Folder Remote Code Execution Vulnerability
Heap-based buffer overflow in Windows Compressed Folder allows an unauthorized attacker to execute code over a network...
Windows Compressed Folder Elevation of Privilege Vulnerability
Improper limitation of a pathname to a restricted directory 'path traversal' in Windows Compressed Folder allows an authorized attacker to elevate privileges locally...
Windows Compressed Folder Information Disclosure Vulnerability
Windows hard link in Windows Compressed Folder allows an unauthorized attacker to disclose information over a network...
EUVD-2023-40362
Malicious code in bioql PyPI...
EUVD-2024-37138
Malicious code in bioql PyPI...
CVE-2024-38165
Windows Compressed Folder Tampering Vulnerability...
CVE-2024-38165
Windows Compressed Folder Tampering Vulnerability...
CVE-2024-38165 Windows Compressed Folder Tampering Vulnerability
...
CVE-2024-38165
CVE-2024-38165 corresponds to Windows Compressed Folder Tampering. The Kaspersky advisory confirms a tampering vulnerability in Windows Compressed Folder that can be exploited remotely to spoof the user interface. Public exploits exist per OpenVAS data. Affected products are Windows platforms aff...
