https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-04T05:06:33.758228+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2026-10443 bdu:2026-10443 2026-10-04T05:06:33.767291+00:00 bdu:2026-10443 https://cve.radiocsirt.org/vuln/euvd-2026-342553 EUVD-2026-342553 2026-10-04T05:06:33.767338+00:00 EUVD-2026-342553 https://cve.radiocsirt.org/vuln/fkie_cve-2026-14266 fkie_cve-2026-14266 2026-10-04T05:06:33.767360+00:00

7-Zip XZ Decompression Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of 7-Zip. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.

The specific flaw exists within the processing of XZ chunked data. Crafted XZ-compressed data can trigger an overflow of a heap-based buffer. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-30169.

 https://cve.radiocsirt.org/vuln/ghsa-836v-xv29-x32v GHSA-836v-xv29-x32v 2026-10-04T05:06:33.767421+00:00

7-Zip XZ Decompression Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of 7-Zip. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.

The specific flaw exists within the processing of XZ chunked data. Crafted XZ-compressed data can trigger an overflow of a heap-based buffer. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-30169.

 https://cve.radiocsirt.org/vuln/opensuse-su-2026:11319-1 openSUSE-SU-2026:11319-1 — 7zip-26.02-1.1 on GA media 2026-10-04T05:06:33.767453+00:00

7zip-26.02-1.1 on GA media

 https://cve.radiocsirt.org/vuln/suse-su-2026:23317-1 SUSE-SU-2026:23317-1 — Security update for 7zip 2026-10-04T05:06:33.767483+00:00

Security update for 7zip

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-14266 UBUNTU-CVE-2026-14266 2026-10-04T05:06:33.767508+00:00

Affected: Ubuntu:14.04:LTS: p7zip, Ubuntu:16.04:LTS: p7zip, Ubuntu:18.04:LTS: p7zip, Ubuntu:20.04:LTS: p7zip, Ubuntu:22.04:LTS: p7zip, Ubuntu:Pro:22.04:LTS: 7zip, Ubuntu:Pro:24.04:LTS: 7zip, Ubuntu:26.04:LTS: 7zip

7-Zip XZ Decompression Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of 7-Zip. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the processing of XZ chunked data. Crafted XZ-compressed data can trigger an overflow of a heap-based buffer. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-30169.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-2369 WID-SEC-W-2026-2369 — 7-Zip: Schwachstelle ermöglicht Codeausführung 2026-10-04T05:06:33.767563+00:00

Ein entfernter, anonymer Angreifer kann eine Schwachstelle in 7-Zip ausnutzen, um beliebigen Programmcode auszuführen.