CVE-2026-70062
HighCVSS 8.1Exploitation Probability (EPSS)
Elevated risk56th percentile - higher than 56% of all known CVEs
Summary
Double free in Windows Libarchive allows an unauthorized attacker to execute code over a network.
Risk Assessment
An unauthorized attacker could execute code remotely, potentially leading to system takeover.
Recommendation
Apply Windows security updates and restrict access to services using Libarchive.
Other vulnerabilities in Windows Libarchive
See all- CVE-2026-69639Critical
Heap-based buffer overflow in Windows Libarchive allows an unauthorized attacker to execute code over a network.
- CVE-2026-69985High
A heap-based buffer overflow in Windows Libarchive allows an unauthorized attacker to execute code over a network.
- CVE-2026-69973Medium
Improper limitation of a pathname to a restricted directory ('path traversal') in Windows Libarchive allows an unauthorized attacker to perform tampering over a network.
- CVE-2026-69968Medium
Relative path traversal in Windows Libarchive allows an unauthorized attacker to perform tampering over a network.
Original NVD description (English source)
Double free in Windows Libarchive allows an unauthorized attacker to execute code over a network.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS