6589 matches found
EUVD-2026-73089
Integer overflow or wraparound in Windows Work Folder Service allows an authorized attacker to execute code over a network...
CVE-2026-71336
Windows Work Folder Service is vulnerable to an integer overflow or wraparound flaw that allows an authorized attacker to achieve remote code execution over the network. The CVSS 3.1 base score is 8.8 (HIGH) with vector AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H, indicating network-attackable exploitati...
EUVD-2026-72994
Heap-based buffer overflow in Windows Compressed Folder allows an unauthorized attacker to execute code over a network...
CVE-2026-69496
CVE-2026-69496 is a heap-based buffer overflow in Windows Compressed Folder that enables an unauthorized, unauthenticated attacker to achieve remote code execution over a network . Microsoft rates it CVSS 9.8 (Critical) with high impact to confidentiality, integrity, and availability. CISA's SSVC...
Windows Compressed Folder Elevation of Privilege Vulnerability
Improper limitation of a pathname to a restricted directory 'path traversal' in Windows Compressed Folder allows an authorized attacker to elevate privileges locally...
Windows Compressed Folder Information Disclosure Vulnerability
Windows hard link in Windows Compressed Folder allows an unauthorized attacker to disclose information over a network...
Windows Compressed Folder Remote Code Execution Vulnerability
Heap-based buffer overflow in Windows Compressed Folder allows an unauthorized attacker to execute code over a network...
Windows Work Folder Service Elevation of Privilege Vulnerability
Use after free in Windows Work Folder Service allows an authorized attacker to elevate privileges locally...
Windows Work Folder Service Remote Code Execution Vulnerability
Integer overflow or wraparound in Windows Work Folder Service allows an authorized attacker to execute code over a network...
PT-2026-87828
Name of the Vulnerable Software and Affected Versions Windows Work Folder Service affected versions not specified Description An integer overflow or wraparound in the Windows Work Folder Service allows an authorized attacker to execute arbitrary code over a network, potentially affecting the...
PT-2026-87566
Name of the Vulnerable Software and Affected Versions Windows Work Folder Service affected versions not specified Description A use-after-free condition in the Windows Work Folder Service allows an authorized attacker to elevate privileges locally. Use-after-free is a memory corruption issue that...
CVE-2026-69496: Heap-based Buffer Overflow
Heap-based buffer overflow in Windows Compressed Folder allows an unauthorized attacker to execute code over a network...
CVE-2026-69445: Improper Limitation of a Pathname to a Restricted Directory
Improper limitation of a pathname to a restricted directory 'path traversal' in Windows Compressed Folder allows an authorized attacker to elevate privileges locally...
CVE-2026-69560: Use After Free
Use after free in Windows Work Folder Service allows an authorized attacker to elevate privileges locally...
PT-2026-87474
Name of the Vulnerable Software and Affected Versions Windows Compressed Folder affected versions not specified Description An improper limitation of a pathname to a restricted directory, known as path traversal, allows an authorized attacker to elevate privileges locally. Path traversal is a...
PT-2026-87518
Heap-based buffer overflow in Windows Compressed Folder allows an unauthorized attacker to execute code over a network...
PT-2026-87787
Windows hard link in Windows Compressed Folder allows an unauthorized attacker to disclose information over a network...
CVE-2026-70019: Windows Hard Link
Windows hard link in Windows Compressed Folder allows an unauthorized attacker to disclose information over a network...
CVE-2026-71336: Integer Overflow or Wraparound
Integer overflow or wraparound in Windows Work Folder Service allows an authorized attacker to execute code over a network...
Malicious Package
Overview tiny-folder-tree is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...