Поиск уязвимостей
Количество 11
Количество 11
CVE-2026-14266
7-Zip XZ Decompression Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of 7-Zip. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the processing of XZ chunked data. Crafted XZ-compressed data can trigger an overflow of a heap-based buffer. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-30169.
CVE-2026-14266
7-Zip XZ Decompression Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of 7-Zip. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the processing of XZ chunked data. Crafted XZ-compressed data can trigger an overflow of a heap-based buffer. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-30169.
CVE-2026-14266
7-Zip XZ Decompression Heap-based Buffer Overflow Remote Code Executio ...
openSUSE-SU-2026:21641-1
Security update for 7zip
SUSE-SU-2026:3869-1
Security update for 7zip
GHSA-836v-xv29-x32v
7-Zip XZ Decompression Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of 7-Zip. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the processing of XZ chunked data. Crafted XZ-compressed data can trigger an overflow of a heap-based buffer. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-30169.
BDU:2026-10443
Уязвимость функции MixCoder_Code() компонента XZ Decoder архиватора 7-Zip, позволяющая нарушителю выполнить произвольный код
ROS-20260921-80-0001
Уязвимость 7zip
ROS-20260921-73-0001
Уязвимость 7zip
ALT-PU-2026-13231
ALT-PU-2026-13231: package `7-zip` update to version 26.02-alt1
ALT-PU-2026-13491
ALT-PU-2026-13491: package `7-zip` update to version 26.02-alt1
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | CVE-2026-14266 7-Zip XZ Decompression Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of 7-Zip. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the processing of XZ chunked data. Crafted XZ-compressed data can trigger an overflow of a heap-based buffer. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-30169. | CVSS3: 7.8 | 1% Низкий | 3 месяца назад |
 | CVE-2026-14266 7-Zip XZ Decompression Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of 7-Zip. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the processing of XZ chunked data. Crafted XZ-compressed data can trigger an overflow of a heap-based buffer. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-30169. | CVSS3: 7.8 | 1% Низкий | 3 месяца назад |
| CVE-2026-14266 7-Zip XZ Decompression Heap-based Buffer Overflow Remote Code Executio ... | CVSS3: 7.8 | 1% Низкий | 3 месяца назад |
 | openSUSE-SU-2026:21641-1 Security update for 7zip | 1% Низкий | 3 месяца назад | |
| SUSE-SU-2026:3869-1 Security update for 7zip | 1% Низкий | 2 месяца назад | |
| GHSA-836v-xv29-x32v 7-Zip XZ Decompression Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of 7-Zip. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the processing of XZ chunked data. Crafted XZ-compressed data can trigger an overflow of a heap-based buffer. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-30169. | CVSS3: 7 | 1% Низкий | 3 месяца назад |
 | BDU:2026-10443 Уязвимость функции MixCoder_Code() компонента XZ Decoder архиватора 7-Zip, позволяющая нарушителю выполнить произвольный код | CVSS3: 7 | 1% Низкий | 5 месяцев назад |
 | ROS-20260921-80-0001 Уязвимость 7zip | CVSS3: 7 | 1% Низкий | около 2 месяцев назад |
| ROS-20260921-73-0001 Уязвимость 7zip | CVSS3: 7 | 1% Низкий | около 2 месяцев назад |
| ALT-PU-2026-13231 ALT-PU-2026-13231: package `7-zip` update to version 26.02-alt1 | CVSS3: 7.8 | 1% Низкий | 3 месяца назад |
| ALT-PU-2026-13491 ALT-PU-2026-13491: package `7-zip` update to version 26.02-alt1 | CVSS3: 8.8 | 3 месяца назад |
Уязвимостей на страницу