CVE-2026-69496
CriticalCVSS 9.8Exploitation Probability (EPSS)
Elevated risk60th percentile - higher than 60% of all known CVEs
Summary
Heap-based buffer overflow in Windows Compressed Folder allows an unauthorized attacker to execute code over a network.
Risk Assessment
An attacker could remotely execute malicious code on the vulnerable system, potentially leading to full system compromise.
Recommendation
Apply the latest security updates provided by the Windows vendor.
Other vulnerabilities in Windows Compressed Folder
See all- CVE-2026-70019Medium
Windows hard link in Windows Compressed Folder allows an unauthorized attacker to disclose information over a network.
- CVE-2026-69445High
Improper limitation of a pathname to a restricted directory ('path traversal') in Windows Compressed Folder allows an authorized attacker to elevate privileges locally.
Original NVD description (English source)
Heap-based buffer overflow in Windows Compressed Folder allows an unauthorized attacker to execute code over a network.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS