CVE-2026-69985
HighCVSS 8.8Exploitation Probability (EPSS)
Elevated risk56th percentile - higher than 56% of all known CVEs
Summary
A heap-based buffer overflow in Windows Libarchive allows an unauthorized attacker to execute code over a network.
Risk Assessment
An attacker could remotely execute arbitrary code, potentially leading to full compromise of a system processing a malicious archive.
Recommendation
Apply the vendor security update as soon as possible and avoid processing untrusted archives.
Other vulnerabilities in Windows Libarchive
See all- CVE-2026-69639Critical
Heap-based buffer overflow in Windows Libarchive allows an unauthorized attacker to execute code over a network.
- CVE-2026-70062High
Double free in Windows Libarchive allows an unauthorized attacker to execute code over a network.
- CVE-2026-69973Medium
Improper limitation of a pathname to a restricted directory ('path traversal') in Windows Libarchive allows an unauthorized attacker to perform tampering over a network.
- CVE-2026-69968Medium
Relative path traversal in Windows Libarchive allows an unauthorized attacker to perform tampering over a network.
Original NVD description (English source)
Heap-based buffer overflow in Windows Libarchive allows an unauthorized attacker to execute code over a network.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS