26 matches found
CVE-2026-70019
Windows hard link in Windows Compressed Folder allows an unauthorized attacker to disclose information over a network...
CVE-2026-69496
Heap-based buffer overflow in Windows Compressed Folder allows an unauthorized attacker to execute code over a network...
CVE-2026-69445
Improper limitation of a pathname to a restricted directory 'path traversal' in Windows Compressed Folder allows an authorized attacker to elevate privileges locally...
CVE-2026-69445
CVE-2026-69445 is a local privilege escalation vulnerability in Windows Compressed Folder caused by an improper limitation of a pathname to a restricted directory (path traversal ). An authorized attacker with low privileges can exploit this locally without user interaction to achieve high impact...
EUVD-2026-73508
Improper limitation of a pathname to a restricted directory 'path traversal' in Windows Compressed Folder allows an authorized attacker to elevate privileges locally...
EUVD-2026-73345
Windows hard link in Windows Compressed Folder allows an unauthorized attacker to disclose information over a network...
CVE-2026-70019
CVE-2026-70019 is an information disclosure vulnerability in Windows Compressed Folder caused by a hard link mechanism that allows an unauthorized attacker to disclose information over a network. The vulnerability requires user interaction and no prior privileges (CVSS 3.1: 6.5 MEDIUM , C:H). CIS...
CVE-2026-69496
CVE-2026-69496 is a heap-based buffer overflow in Windows Compressed Folder that enables an unauthorized, unauthenticated attacker to achieve remote code execution over a network . Microsoft rates it CVSS 9.8 (Critical) with high impact to confidentiality, integrity, and availability. CISA's SSVC...
EUVD-2026-72994
Heap-based buffer overflow in Windows Compressed Folder allows an unauthorized attacker to execute code over a network...
Windows Compressed Folder Information Disclosure Vulnerability
Windows hard link in Windows Compressed Folder allows an unauthorized attacker to disclose information over a network...
Windows Compressed Folder Elevation of Privilege Vulnerability
Improper limitation of a pathname to a restricted directory 'path traversal' in Windows Compressed Folder allows an authorized attacker to elevate privileges locally...
Windows Compressed Folder Remote Code Execution Vulnerability
Heap-based buffer overflow in Windows Compressed Folder allows an unauthorized attacker to execute code over a network...
PT-2026-87474
Name of the Vulnerable Software and Affected Versions Windows Compressed Folder affected versions not specified Description An improper limitation of a pathname to a restricted directory, known as path traversal, allows an authorized attacker to elevate privileges locally. Path traversal is a...
CVE-2026-69445: Improper Limitation of a Pathname to a Restricted Directory
Improper limitation of a pathname to a restricted directory 'path traversal' in Windows Compressed Folder allows an authorized attacker to elevate privileges locally...
PT-2026-87518
Heap-based buffer overflow in Windows Compressed Folder allows an unauthorized attacker to execute code over a network...
CVE-2026-70019: Windows Hard Link
Windows hard link in Windows Compressed Folder allows an unauthorized attacker to disclose information over a network...
PT-2026-87787
Windows hard link in Windows Compressed Folder allows an unauthorized attacker to disclose information over a network...
CVE-2026-69496: Heap-based Buffer Overflow
Heap-based buffer overflow in Windows Compressed Folder allows an unauthorized attacker to execute code over a network...
PT-2024-6181 · Microsoft · Windows Compressed Folder +1
Name of the Vulnerable Software and Affected Versions: Windows Compressed Folder affected versions not specified Description: The issue is related to incorrect external management of a file's name or path in Windows operating systems. This can allow a remote attacker to gain unauthorized access t...