CVE-2026-69639
CriticalCVSS 9.8Exploitation Probability (EPSS)
Elevated risk61th percentile - higher than 61% of all known CVEs
Summary
Heap-based buffer overflow in Windows Libarchive allows an unauthorized attacker to execute code over a network.
Risk Assessment
An attacker can remotely execute code on the system, potentially leading to full system compromise or lateral movement.
Recommendation
Apply the latest security updates from Microsoft for the Libarchive library.
Other vulnerabilities in Windows Libarchive
See all- CVE-2026-70062High
Double free in Windows Libarchive allows an unauthorized attacker to execute code over a network.
- CVE-2026-69985High
A heap-based buffer overflow in Windows Libarchive allows an unauthorized attacker to execute code over a network.
- CVE-2026-69973Medium
Improper limitation of a pathname to a restricted directory ('path traversal') in Windows Libarchive allows an unauthorized attacker to perform tampering over a network.
- CVE-2026-69968Medium
Relative path traversal in Windows Libarchive allows an unauthorized attacker to perform tampering over a network.
Original NVD description (English source)
Heap-based buffer overflow in Windows Libarchive allows an unauthorized attacker to execute code over a network.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS