What is CVE-2024-20696?

CVE-2024-20696 is a high-severity software vulnerability (CWE-122) with a CVSS score of 7.3. Windows libarchive Remote Code Execution Vulnerability

Is CVE-2024-20696 being actively exploited?

It is not currently in CISA's KEV catalog. Its EPSS exploitation probability is 3%.

Tracked products affected include Windows Server 2022. Check the version you run to see whether it is affected.

Apply the vendor fix promptly. An official patch or advisory is available. Upgrade affected products to a fixed version.

HIGH severity · CVSS 7.3 · CWE-122

7.3CVSS HIGH

Windows libarchive Remote Code Execution Vulnerability

Attack vectorLocal

Attack complexityLow

Privileges requiredLow

User interactionRequired

Confidentiality impactHigh

Integrity impactHigh

Availability impactHigh

Exploit probability (EPSS)3%

CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H

Apply the vendor fix promptly. Open any affected product above for its exact safe version.