{"id":"CVE-2026-69985","published":"2026-10-13T19:19:09.217","lastModified":"2026-10-16T16:20:17.563","description":"Heap-based buffer overflow in Windows Libarchive allows an unauthorized attacker to execute code over a network.","cvssScore":8.8,"cvssSeverity":"HIGH","cvssVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cwes":["CWE-122"],"vendors":[],"products":[],"references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69985","tags":[]}],"exploitRefs":[],"hasPoc":false,"ai":{"summary":"A heap-based buffer overflow in Windows Libarchive library allows remote attackers to execute arbitrary code when processing specially crafted archive files. This vulnerability is particularly concerning because it can be exploited over a network without authentication.","exploitability":"Exploitation is moderately difficult and requires an attacker to convince a target to process a malicious archive file, typically through network-based delivery mechanisms like email attachments or web downloads, with no authentication required for the attack.","blast_radius":"The impact could be significant across Windows systems that use Libarchive for handling compressed archives, potentially affecting servers, workstations, and applications that process user-uploaded or downloaded archive files.","remediation":"Apply the latest Windows updates which include a fix for this vulnerability in the Libarchive library, specifically targeting the version containing the patched Libarchive component.","detection":"No reliable host or network indicator is derivable from the published description.","tags":["rce","archive","windows"],"model":"garnet-coder","analyzedAt":"2026-10-18T09:54:46.301Z"}}