CVE-2026-70019: CWE-65: Windows Hard Link in Microsoft Windows 11 version 23H2

This vulnerability (CVE-2026-70019) concerns a flaw in the handling of Windows hard links within the Windows Compressed Folder feature on Windows 11 version 23H2. An attacker without privileges can exploit this to disclose information over a network. The CVSS 3.1 base score is 6.5, reflecting network attack vector, low attack complexity, no privileges required, user interaction required, and high confidentiality impact. Multiple affected Windows 11 builds are identified, with patches released by Microsoft to remediate the issue.

An unauthorized attacker can disclose sensitive information over a network due to improper handling of hard links in Windows Compressed Folder. The vulnerability does not allow modification or denial of service but impacts confidentiality. No known exploits are reported in the wild.

An official fix is available from Microsoft. Users and administrators should apply the security updates for Windows 11 version 23H2 as detailed in the Microsoft advisory at https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70019 to remediate this vulnerability.