CVE-2024-26256

Libarchive Remote Code Execution Vulnerability

Libarchive Remote Code Execution Vulnerability

Affected

Microsoft · Windows 11 version 22H2 · Windows 11 version 22H3 · Windows 11 Version 23H2 · Windows Server 2022, 23H2 Edition (Server Core installation)

CVSS v3.1 MICROSOFT

7.8 HIGHCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

EPSS

87.90% chance of exploitation in the next 30 days, 100th percentile

Published

2024-04-09

Updated

2025-05-03

Proof-of-concept exploits (1)

• R3n3r0/cve-2025-59150★ · 2026-07-30

Security advisories

• https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-26256
• LeSuisse/nixpkgs/commit/81b82a2934521dffef76f7ca305d8d4e22fe7262
• libarchive/libarchive/commit/eb7939b24a681a04648a59cdebd386b1e9dc9237.patch

References

• CVE Record
• NVD entry

Related

• CVE-2025-5915
• CVE-2026-0049
• CVE-2026-20700
• CVE-2026-27280