Will Dormann on Twitter

“It's time to reveal the #ZippyReads CVE-2022-41091 3-word description: read-only files When you zip a read-only file, Windows will upon extraction: 1) Write file 2) Mark as read-only 3) Attempt to set the MotW on the read-only file (and fail) That's it. That's the bug.”