Vulnerability Monitor

Type: Secondary CWE-122
Type: Primary NVD-CWE-noinfo

The vendors, products, and vulnerabilities you care about

CVE-2024-20697

Windows libarchive Remote Code Execution Vulnerability

2024-01-09T18:15:53.130

2024-11-21T08:52:57.043

Modified

CVSSv3.1: 7.3 (HIGH)

Type	Vendor	Product	Version/Range	Vulnerable?
Operating System	microsoft	windows_11_22h2	< 10.0.22621.3007	Yes
Operating System	microsoft	windows_11_22h2	< 10.0.22621.3007	Yes
Operating System	microsoft	windows_11_23h2	< 10.0.22631.3007	Yes
Operating System	microsoft	windows_11_23h2	< 10.0.22631.3007	Yes
Operating System	microsoft	windows_server_2022_23h2	-	Yes

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-20697 Patch, Vendor Advisory ([email protected])
http://www.openwall.com/lists/oss-security/2024/06/04/2 (af854a3a-2127-422b-91ae-364da2661108)
http://www.openwall.com/lists/oss-security/2024/06/05/1 (af854a3a-2127-422b-91ae-364da2661108)
https://github.com/advisories/GHSA-w6xv-37jv-7cjr (af854a3a-2127-422b-91ae-364da2661108)
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-20697 Patch, Vendor Advisory (af854a3a-2127-422b-91ae-364da2661108)
https://www.zerodayinitiative.com/blog/2024/4/17/cve-2024-20697-windows-libarchive-remote-code-execution-vulnerability (af854a3a-2127-422b-91ae-364da2661108)