CVE-2024-20696

CVSS 3.1 Score 7.3 of 10 (high)

Details

Published Jan 9, 2024
Updated: Jun 8, 2024
CWE ID 122

Summary

CVE-2024-20696 denotes a newly disclosed remote code execution vulnerability affecting Windows systems with the Libarchive library installed. An attacker can exploit this flaw by crafting a maliciously crafted archive file, potentially resulting in the execution of arbitrary code on an affected machine. Successful exploitation could lead to significant security risks, including data theft or system compromise. Users are advised to update their Libarchive installations as soon as patches become available to mitigate this danger.

Ligh bulbPrevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Share