CVE-2026-14266: Inside the 7-Zip Heap Overflow Hiding in XZ Archives Since 2021
A heap-based buffer overflow in 7-Zip’s XZ decoder, patched in version 26.02, let a crafted archive run code on extraction and had gone unnoticed for five years.
A heap-based buffer overflow in 7-Zip’s XZ decoder, patched in version 26.02, let a crafted archive run code on extraction and had gone unnoticed for five years.
Recognizing the need for labeling internet-downloaded files, 7-Zip now includes support for the ‘Mark-of-the-Web’ security…
7-Zip is open-source software used for archiving files, the software has been in use for…