CVE-2026-69445

Improper limitation of a pathname to a restricted directory ('path traversal') in Windows Compressed Folder allows an authorized attacker to elevate privileges locally.

An attacker could access files outside the intended directory, potentially leading to privilege escalation and system integrity compromise.

Apply Windows security updates and restrict access to compressed folder functionality.