Description
Windows libarchive Remote Code Execution Vulnerability
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Microsoft | Windows 11 version 22H2 | 10.0.22621.0 – < 10.0.22621.3007 | 10.0.22621.3007 |
| Microsoft | Windows 11 version 22H3 | 10.0.22631.0 – < 10.0.22631.3007 | 10.0.22631.3007 |
| Microsoft | Windows 11 Version 23H2 | 10.0.22631.0 – < 10.0.22631.3007 | 10.0.22631.3007 |
| Microsoft | Windows Server 2022, 23H2 Edition (Server Core installation) | 10.0.25398.0 – < 10.0.25398.643 | 10.0.25398.643 |
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
SUSE
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| SLES 15 SP6 | libarchive | 3.7.2-150600.3.3.1 | SUSE-SU-2024:3940-1, SUSE-SU-2024:2083-1 |
Show 2 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| SLE Micro 6.1 | libarchive | 3.7.4-slfo.1.1_2.1 | SUSE-SU-2025:20257-1 |
| SLE Micro 6.0 | libarchive | 3.6.2-3.1 | SUSE-SU-2025:20087-1, SUSE-SU-2025:20050-1 |
openSUSE
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| openSUSE Leap 15.6 | libarchive | 3.7.2-150600.3.3.1 | SUSE-SU-2024:3940-1, SUSE-SU-2024:2083-1 |
Wolfi
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Wolfi rolling | libarchive | 3.7.4-r0 | — |
Advisories 7
- SUSE-SU-2025:20087-1 Security update for libarchive SUSE / openSUSE Security Updates · Mar 23, 2026
- SUSE-SU-2025:20050-1 Security update for libarchive SUSE / openSUSE Security Updates · Mar 23, 2026
- SUSE-SU-2025:20257-1 Security update for libarchive SUSE / openSUSE Security Updates · Mar 23, 2026
- SUSE-SU-2024:3940-1 Security update for libarchive SUSE / openSUSE Security Updates · Feb 4, 2026
- SUSE-SU-2024:2083-1 Security update for libarchive SUSE / openSUSE Security Updates · Feb 4, 2026
- WID-SEC-2024-0036 Microsoft Windows und Microsoft Windows Server: Mehrere Schwachstellen BSI CERT-Bund (WID) · Mar 23, 2025
- MSRC-CVE-2024-20697 Windows libarchive Remote Code Execution Vulnerability Microsoft Security Response Center · Jan 9, 2024
References
- Windows libarchive Remote Code Execution Vulnerability vendor-advisory