CVE Catalog
CVE-2026-70019
MediumCVSS 6.5Exploitation Probability (EPSS)
Elevated risk1.06%
63th percentile - higher than 63% of all known CVEs
Summary
Windows hard link in Windows Compressed Folder allows an unauthorized attacker to disclose information over a network.
Risk Assessment
Risk of data disclosure from compressed folders.
Recommendation
Install Windows security updates.
Other vulnerabilities in Windows Compressed Folder
See all- CVE-2026-69496Critical
Heap-based buffer overflow in Windows Compressed Folder allows an unauthorized attacker to execute code over a network.
- CVE-2026-69445High
Improper limitation of a pathname to a restricted directory ('path traversal') in Windows Compressed Folder allows an authorized attacker to elevate privileges locally.
Original NVD description (English source)
Windows hard link in Windows Compressed Folder allows an unauthorized attacker to disclose information over a network.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS