New 7-Zip Vulnerability Could Let Crafted XZ Archives Run Code During Extraction

Opening a crafted XZ archive in 7-Zip could let an attacker run code on the machine. The flaw, CVE-2026-14266, is a heap-based buffer overflow in how the archiver processes XZ chunked data, and Trend Micro's Zero Day Initiative ZDI detailed it on July 15. A fix shipped on June 25 in 7-Zip 26.02...

CVE-2026-14266

creationtimestamp| type| source ---|---|--- 2026-07-16 16:33:36+00:00| seen| https://bsky.app/profile/securityonline.bsky.social/post/3mqro25h4we2v 2026-07-17 05:20:54+00:00| seen| https://bsky.app/profile/thecybersecguru.com/post/3mqsywb7tak2d 2026-07-17 05:39:01+00:00| seen|...