CyberShieldAlerts
Hacking News·1 min read

New 7-Zip Vulnerability Could Let Crafted XZ Archives Run Code During Extraction

Opening a crafted XZ archive in 7-Zip could let an attacker run code on the machine. The flaw, CVE-2026-14266, is a heap-based buffer overflow in how the archiver processes XZ chunked data, and Trend

CS
CyberShield Team
2026-07-20
Share:
New 7-Zip Vulnerability Could Let Crafted XZ Archives Run Code During Extraction

Opening a crafted XZ archive in 7-Zip could let an attacker run code on the machine. The flaw, CVE-2026-14266, is a heap-based buffer overflow in how the archiver processes XZ chunked data, and Trend Micro's Zero Day Initiative (ZDI) detailed it on July 15. A fix shipped on June 25 in 7-Zip 26.02. The overflow lets an attacker "execute code in the context of the current process," per the

Tags

#cybersecurity#news
Share:

Join the Discussion

Comments coming soon. Follow us on social media for real-time discussions.

Related Articles

Attackers Weaponize GitHub Actions Runners to Target cPanel and WHM Servers
Hacking News
1 min read

Attackers Weaponize GitHub Actions Runners to Target cPanel and WHM Servers

Cybersecurity researchers have shed light on a large-scale campaign that has turned compromised GitHub repositories into distributed attack infrastructure designed to target cPanel and WebHost Manager

CyberShield TeamRead More
Chaos Ransomware Uses msaRAT to Route C2 Traffic Through Headless Chrome and Edge
Hacking News
1 min read

Chaos Ransomware Uses msaRAT to Route C2 Traffic Through Headless Chrome and Edge

The Chaos ransomware group ran its command-and-control through the victim's own browser. Cisco Talos on Thursday detailed msaRAT, the Rust implant behind it, found on a compromised Windows machine ahe

CyberShield TeamRead More
Check Point Patches Exploited SmartConsole Flaw Allowing Full Admin Access
Hacking News
1 min read

Check Point Patches Exploited SmartConsole Flaw Allowing Full Admin Access

Check Point has released security updates to address multiple vulnerabilities impacting Security Management and Multi-Domain Management (MDSM) products, including a critical flaw that has come under a

CyberShield TeamRead More
← Previous

Russian Intelligence Hacks IP Cameras to Spy on Military Logistics Across NATO States and Ukraine

Next →

Mythos Didn't Break Your Security Program. Your Exposure Window Could.