CVE-2026-58052

7-Zip for Windows through 26.02 fails to preserve the Mark-of-the-Web when extracting a crafted RAR5 archive, because its guard that suppresses an archive-supplied Zone.Identifier stream matches the exact name 'Zone.Identifier' while a RAR5 STM record named ':Zone.Identifier:$DATA' is not matched...

CVE-2026-58052

Technical details are not publicly available in the provided documents; monitor for updates.

Amazon Linux 2023 : 7zip, 7zip-reduced, 7zip-standalone (ALAS2023-2026-1820)

It is, therefore, affected by a vulnerability as referenced in the ALAS2023-2026-1820 advisory. A heap buffer overflow vulnerability GHSL-2026-140 exists in 7-Zip version 26.00, caused by an under- allocation in the NTFS compressed stream buffer GetCuSize shift UB, potentially allowing attackers ...

Sun One WebServer source code disclosure

It's possible to obtains page source code via alternate NTFS streams http://server/hello.jsp::$DATA...

Use ntfs streams to hide files-the vulnerability warning-the black bar safety net

Everyone put on an ntfs partition the files are copied to non-ntfs partition, may occasionally encounter the following situations, the system prompts will have data lost, what is this? ! Actually the ntfs file system is introduced into the"flow"of this concept, each file can have multiple streams...

Easy File Sharing Web Server protection bypass

By using alternative NTFS-streams it's possible to retrieve protected data, including accounts and passwords...

Дырки в Quota Advisor

Пользователь может обойти установленные файловые квоты используя NTFS-потоки. Например: type bigfile.txt nullfile.txt:hidden Кроме того, возможно получить список локальных файлов...