https://db.gcve.eu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Wed, 11 Nov 2026 16:35:06 +0000 https://db.gcve.eu/vuln/fkie_cve-2026-125742 <p>7-Zip before 26.06 contains a heap out-of-bounds write vulnerability in the LZX decoder that lets attackers corrupt memory when a continuation CAB volume declares a smaller window. Attackers can entice victims to extract crafted multi-volume CAB archives, where a stale _pos value bypasses bounds checks, enabling arbitrary code execution.</p> <p>7-Zip before 26.06 contains a heap out-of-bounds write vulnerability in the LZX decoder that lets attackers corrupt memory when a continuation CAB volume declares a smaller window. Attackers can entice victims to extract crafted multi-volume CAB archives, where a stale _pos value bypasses bounds checks, enabling arbitrary code execution.</p> https://db.gcve.eu/vuln/fkie_cve-2026-125742 https://db.gcve.eu/vuln/ghsa-vfpw-mfgh-fqwf <p>7-Zip before 26.06 contains a heap out-of-bounds write vulnerability in the LZX decoder that lets attackers corrupt memory when a continuation CAB volume declares a smaller window. Attackers can entice victims to extract crafted multi-volume CAB archives, where a stale _pos value bypasses bounds checks, enabling arbitrary code execution.</p> <p>7-Zip before 26.06 contains a heap out-of-bounds write vulnerability in the LZX decoder that lets attackers corrupt memory when a continuation CAB volume declares a smaller window. Attackers can entice victims to extract crafted multi-volume CAB archives, where a stale _pos value bypasses bounds checks, enabling arbitrary code execution.</p> https://db.gcve.eu/vuln/ghsa-vfpw-mfgh-fqwf https://db.gcve.eu/vuln/wid-sec-w-2026-4448 <p>Ein Angreifer kann mehrere Schwachstellen in 7-Zip ausnutzen, um beliebigen Code auszuführen oder einen nicht näher spezifizierten Angriff durchzuführen.</p> <p>Ein Angreifer kann mehrere Schwachstellen in 7-Zip ausnutzen, um beliebigen Code auszuführen oder einen nicht näher spezifizierten Angriff durchzuführen.</p> https://db.gcve.eu/vuln/wid-sec-w-2026-4448