New 7-Zip Vulnerability Could Let Crafted XZ Archives Run Code During Extraction
A heap-based buffer overflow in 7-Zip's handling of XZ chunked data, CVE-2026-14266, could let a crafted XZ archive execute code in the context of the current process when opened, and Trend Micro's Zero Day Initiative detailed it on July 15. A fix shipped...