https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 08:09:36 +0000 https://cve.radiocsirt.org/vuln/7paa023732 <p>ABB is aware of public reports of vulnerabilities in 7-Zip version 18.5 and Microsoft Azure Data Studio version 1.32 included in the product versions listed as affected in the advisory.</p> <p>The vulnerability in 7-Zip can be exploited if attacker gains control over the system and extracts a malicious file using this version of 7-Zip. Otherwise, the attacker must force the user to visit malicious websites or click links and extract the package through 7-zip.</p> <p>Microsoft Azure Data Studio gets installed along with SQL Server Management Studio. An attacker who successfully exploits vulnerability in Microsoft Azure Data studio may compromise the security of the product by gaining privileges, reading sensitive information, executing commands, evading detection, etc. if the Authentication, Authorization and Accountability is not configured properly in the system. However, none of the products listed above uses Microsoft Azure Data Studio. Microsoft Azure Data Studio is automatically removed from the system from System 800xA 7.0 onwards.</p> <p>These vulnerabilities may appear when the product media is scanned. However, they can only be ex-ploited if the vulnerable software is installed on the system. For this reason, it is strongly advised to uninstall outdated or vulnerable versions of third-party software immediately.</p> <p>ABB is aware of public reports of vulnerabilities in 7-Zip version 18.5 and Microsoft Azure Data Studio version 1.32 included in the product versions listed as affected in the advisory.</p> <p>The vulnerability in 7-Zip can be exploited if attacker gains control over the system and extracts a malicious file using this version of 7-Zip. Otherwise, the attacker must force the user to visit malicious websites or click links and extract the package through 7-zip.</p> <p>Microsoft Azure Data Studio gets installed along with SQL Server Management Studio. An attacker who successfully exploits vulnerability in Microsoft Azure Data studio may compromise the security of the product by gaining privileges, reading sensitive information, executing commands, evading detection, etc. if the Authentication, Authorization and Accountability is not configured properly in the system. However, none of the products listed above uses Microsoft Azure Data Studio. Microsoft Azure Data Studio is automatically removed from the system from System 800xA 7.0 onwards.</p> <p>These vulnerabilities may appear when the product media is scanned. However, they can only be ex-ploited if the vulnerable software is installed on the system. For this reason, it is strongly advised to uninstall outdated or vulnerable versions of third-party software immediately.</p> https://cve.radiocsirt.org/vuln/7paa023732 https://cve.radiocsirt.org/vuln/bdu:2024-11604 bdu:2024-11604 https://cve.radiocsirt.org/vuln/bdu:2024-11604 https://cve.radiocsirt.org/vuln/euvd-2026-258483 EUVD-2026-258483 https://cve.radiocsirt.org/vuln/euvd-2026-258483 https://cve.radiocsirt.org/vuln/fkie_cve-2023-52169 <p>The NtfsHandler.cpp NTFS handler in 7-Zip before 24.01 (for 7zz) contains an out-of-bounds read that allows an attacker to read beyond the intended buffer. The bytes read beyond the intended buffer are presented as a part of a filename listed in the file system image. This has security relevance in some known web-service use cases where untrusted users can upload files and have them extracted by a server-side 7-Zip process.</p> <p>The NtfsHandler.cpp NTFS handler in 7-Zip before 24.01 (for 7zz) contains an out-of-bounds read that allows an attacker to read beyond the intended buffer. The bytes read beyond the intended buffer are presented as a part of a filename listed in the file system image. This has security relevance in some known web-service use cases where untrusted users can upload files and have them extracted by a server-side 7-Zip process.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2023-52169 https://cve.radiocsirt.org/vuln/ghsa-g8p4-4qgr-rf4f <p>The NtfsHandler.cpp NTFS handler in 7-Zip before 24.01 (for 7zz) contains an out-of-bounds read that allows an attacker to read beyond the intended buffer. The bytes read beyond the intended buffer are presented as a part of a filename listed in the file system image. This has security relevance in some known web-service use cases where untrusted users can upload files and have them extracted by a server-side 7-Zip process.</p> <p>The NtfsHandler.cpp NTFS handler in 7-Zip before 24.01 (for 7zz) contains an out-of-bounds read that allows an attacker to read beyond the intended buffer. The bytes read beyond the intended buffer are presented as a part of a filename listed in the file system image. This has security relevance in some known web-service use cases where untrusted users can upload files and have them extracted by a server-side 7-Zip process.</p> https://cve.radiocsirt.org/vuln/ghsa-g8p4-4qgr-rf4f https://cve.radiocsirt.org/vuln/gsd-2023-52169 gsd-2023-52169 https://cve.radiocsirt.org/vuln/gsd-2023-52169 https://cve.radiocsirt.org/vuln/oesa-2025-1748 <p><strong>Affected:</strong> openEuler:24.03-LTS-SP2: p7zip, openEuler:20.03-LTS-SP4: p7zip, openEuler:22.03-LTS-SP3: p7zip, openEuler:22.03-LTS-SP4: p7zip, openEuler:24.03-LTS: p7zip, openEuler:24.03-LTS-SP1: p7zip</p> <p>7za for Linux system to archive file as 7z file format Security Fix(es):</p> <p>The NtfsHandler.cpp NTFS handler in 7-Zip before 24.01 (for 7zz) contains a heap-based buffer overflow that allows an attacker to overwrite two bytes at multiple offsets beyond the allocated buffer size: buffer+512*i-2, for i=9, i=10, i=11, etc.(CVE-2023-52168)</p> <p>The NtfsHandler.cpp NTFS handler in 7-Zip before 24.01 (for 7zz) contains an out-of-bounds read that allows an attacker to read beyond the intended buffer. The bytes read beyond the intended buffer are presented as a part of a filename listed in the file system image. This has security relevance in some known web-service use cases where untrusted users can upload files and have them extracted by a server-side 7-Zip process.(CVE-2023-52169)</p> <p><strong>Affected:</strong> openEuler:24.03-LTS-SP2: p7zip, openEuler:20.03-LTS-SP4: p7zip, openEuler:22.03-LTS-SP3: p7zip, openEuler:22.03-LTS-SP4: p7zip, openEuler:24.03-LTS: p7zip, openEuler:24.03-LTS-SP1: p7zip</p> <p>7za for Linux system to archive file as 7z file format Security Fix(es):</p> <p>The NtfsHandler.cpp NTFS handler in 7-Zip before 24.01 (for 7zz) contains a heap-based buffer overflow that allows an attacker to overwrite two bytes at multiple offsets beyond the allocated buffer size: buffer+512*i-2, for i=9, i=10, i=11, etc.(CVE-2023-52168)</p> <p>The NtfsHandler.cpp NTFS handler in 7-Zip before 24.01 (for 7zz) contains an out-of-bounds read that allows an attacker to read beyond the intended buffer. The bytes read beyond the intended buffer are presented as a part of a filename listed in the file system image. This has security relevance in some known web-service use cases where untrusted users can upload files and have them extracted by a server-side 7-Zip process.(CVE-2023-52169)</p> https://cve.radiocsirt.org/vuln/oesa-2025-1748 https://cve.radiocsirt.org/vuln/suse-su-2024:2475-1 <p>Security update for p7zip</p> <p>Security update for p7zip</p> https://cve.radiocsirt.org/vuln/suse-su-2024:2475-1 https://cve.radiocsirt.org/vuln/ubuntu-cve-2023-52169 <p><strong>Affected:</strong> Ubuntu:Pro:22.04:LTS: 7zip, Ubuntu:Pro:24.04:LTS: 7zip</p> <p>The NtfsHandler.cpp NTFS handler in 7-Zip before 24.01 (for 7zz) contains an out-of-bounds read that allows an attacker to read beyond the intended buffer. The bytes read beyond the intended buffer are presented as a part of a filename listed in the file system image. This has security relevance in some known web-service use cases where untrusted users can upload files and have them extracted by a server-side 7-Zip process.</p> <p><strong>Affected:</strong> Ubuntu:Pro:22.04:LTS: 7zip, Ubuntu:Pro:24.04:LTS: 7zip</p> <p>The NtfsHandler.cpp NTFS handler in 7-Zip before 24.01 (for 7zz) contains an out-of-bounds read that allows an attacker to read beyond the intended buffer. The bytes read beyond the intended buffer are presented as a part of a filename listed in the file system image. This has security relevance in some known web-service use cases where untrusted users can upload files and have them extracted by a server-side 7-Zip process.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2023-52169 https://cve.radiocsirt.org/vuln/wid-sec-w-2024-1516 <p>Ein entfernter anonymer Angreifer kann mehrere Schwachstellen in 7-Zip ausnutzen, um Dateien zu manipulieren oder vertrauliche Informationen offenzulegen.</p> <p>Ein entfernter anonymer Angreifer kann mehrere Schwachstellen in 7-Zip ausnutzen, um Dateien zu manipulieren oder vertrauliche Informationen offenzulegen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2024-1516