https://db.gcve.eu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Thu, 01 Oct 2026 20:44:57 +0000 https://db.gcve.eu/vuln/cve-2026-58052 <p><strong>Affected:</strong> 7-Zip</p> <p>7-Zip for Windows through 26.01 fails to preserve the Mark-of-the-Web when extracting a crafted RAR5 archive, because its guard that suppresses an archive-supplied Zone.Identifier stream matches the exact name &#39;Zone.Identifier&#39; while a RAR5 STM record named &#39;:Zone.Identifier:$DATA&#39; is not matched and NTFS canonicalizes it to the same stream, overwriting the propagated Internet-zone marker with ZoneId=0. A second STM record named &#39;::$DATA&#39; overwrites the extracted file&#39;s default data stream, letting an attacker defeat SmartScreen/MotW warnings and spoof file content.</p> <p><strong>Affected:</strong> 7-Zip</p> <p>7-Zip for Windows through 26.01 fails to preserve the Mark-of-the-Web when extracting a crafted RAR5 archive, because its guard that suppresses an archive-supplied Zone.Identifier stream matches the exact name &#39;Zone.Identifier&#39; while a RAR5 STM record named &#39;:Zone.Identifier:$DATA&#39; is not matched and NTFS canonicalizes it to the same stream, overwriting the propagated Internet-zone marker with ZoneId=0. A second STM record named &#39;::$DATA&#39; overwrites the extracted file&#39;s default data stream, letting an attacker defeat SmartScreen/MotW warnings and spoof file content.</p> https://db.gcve.eu/vuln/cve-2026-58052