CVE-2024-20697
Windows libarchive Remote Code Execution Vulnerability
- Score
- CVSS 3.1 7.3 High
- Status
- Modified - secure@microsoft.com
- Published
- 2024-01-09
- Last modified
- 2025-06-05
- Weaknesses
- CWE-122
Affected products
- Windows 11 22H2 (Microsoft)
- Windows 11 22h2 (Microsoft)
- Windows 11 23H2 (Microsoft)
- Windows 11 23h2 (Microsoft)
- Windows Server 2022 23h2 (Microsoft)
- Windows Server 23h2 (Microsoft)
References
- https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-20697
- http://www.openwall.com/lists/oss-security/2024/06/04/2
- http://www.openwall.com/lists/oss-security/2024/06/05/1
- https://github.com/advisories/GHSA-w6xv-37jv-7cjr
- https://www.zerodayinitiative.com/blog/2024/4/17/cve-2024-20697-windows-libarchive-remote-code-execution-vulnerability
