CVE-2026-69973
MediumCVSS 6.5Exploitation Probability (EPSS)
Elevated risk53th percentile - higher than 53% of all known CVEs
Summary
Improper limitation of a pathname to a restricted directory ('path traversal') in Windows Libarchive allows an unauthorized attacker to perform tampering over a network.
Risk Assessment
An attacker may modify files or data on the system, potentially leading to integrity violations.
Recommendation
Apply security patches for Windows Libarchive and validate file paths in applications using this library.
Other vulnerabilities in Windows Libarchive
See all- CVE-2026-69639Critical
Heap-based buffer overflow in Windows Libarchive allows an unauthorized attacker to execute code over a network.
- CVE-2026-70062High
Double free in Windows Libarchive allows an unauthorized attacker to execute code over a network.
- CVE-2026-69985High
A heap-based buffer overflow in Windows Libarchive allows an unauthorized attacker to execute code over a network.
- CVE-2026-69968Medium
Relative path traversal in Windows Libarchive allows an unauthorized attacker to perform tampering over a network.
Original NVD description (English source)
Improper limitation of a pathname to a restricted directory ('path traversal') in Windows Libarchive allows an unauthorized attacker to perform tampering over a network.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS