https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-06T06:50:48.501703+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-335727 EUVD-2026-335727 2026-10-06T06:50:48.504107+00:00 EUVD-2026-335727 https://cve.radiocsirt.org/vuln/fkie_cve-2026-55783 fkie_cve-2026-55783 2026-10-06T06:50:48.504141+00:00

NanaZip is the 7-Zip derivative intended for the modern Windows experience. Prior to 6.5.1749.0, NanaZip's seven in-house IInArchive handlers in NanaZip.Codecs unconditionally dereference the caller-supplied Indices array inside Extract when the archive engine signals extract everything by passing Indices as NULL and NumItems as 0xFFFFFFFF. This causes a NULL pointer dereference in the standard Test archive or Extract all code path for WebAssembly, ElectronAsar, Zealfs, Romfs, Ufs, Littlefs, and DotNetSingleFile archives, resulting in a process crash. This issue is fixed in version 6.5.1749.0.