Most recent entries from all https://db.gcve.eu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Wed, 11 Nov 2026 16:50:19 +0000 CVE-2026-125742 — 7-Zip before 26.06 Heap Out-of-Bounds Write via LZX Decoder in CAB Extraction https://db.gcve.eu/vuln/cve-2026-125742 <p><strong>Affected:</strong> 7-Zip</p> <p>7-Zip before 26.06 contains a heap out-of-bounds write vulnerability in the LZX decoder that lets attackers corrupt memory when a continuation CAB volume declares a smaller window. Attackers can entice victims to extract crafted multi-volume CAB archives, where a stale _pos value bypasses bounds checks, enabling arbitrary code execution.</p> <p><strong>Affected:</strong> 7-Zip</p> <p>7-Zip before 26.06 contains a heap out-of-bounds write vulnerability in the LZX decoder that lets attackers corrupt memory when a continuation CAB volume declares a smaller window. Attackers can entice victims to extract crafted multi-volume CAB archives, where a stale _pos value bypasses bounds checks, enabling arbitrary code execution.</p> https://db.gcve.eu/vuln/cve-2026-125742