CVE-2024-26256: high-severity vulnerability in Microsoft Windows 11 version 22H2
Libarchive Remote Code Execution Vulnerability
Published · Updated
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
No sign of exploitation. No public exploitation artifact known so far.
Official vendor statements in CSAF/VEX format: whether their product is affected, already fixed, or ruled out — and why. These are the vendor's assertions, not Vexday's judgment.
Libarchive, a library used to extract files from compressed archives, has a vulnerability that allows attackers to run malicious code on your computer by crafting a specially designed archive file. When you extract this malicious archive, the attacker's code executes with the same privileges as your application.
A buffer overflow vulnerability (CWE-122) in libarchive's archive extraction routine allows remote code execution when processing specially crafted archive files. The attack vector requires user interaction to extract a malicious archive; successful exploitation grants arbitrary code execution in the context of the vulnerable application.
In the same product, most dangerous first.