Vulnerabilities in Igor Pavlov's 7-Zip, the open-source archive utility bundled or installed on tens of millions of Windows endpoints. 7-Zip ships without an auto-update mechanism, so parser bugs — heap overflows in Zstd, XZ, or LZMA decompression, path-traversal in extraction — tend to sit on user machines long after the fix is out. Combined article + CVE feed for the 7-Zip beat.https://0daynews.com/en-ushttps://0daynews.com/cve/cve-2025-0411/https://0daynews.com/cve/cve-2025-0411/7-Zip contains a protection mechanism failure vulnerability that allows remote attackers to bypass the Mark-of-the-Web security feature to execute arbitrary code in the context of the current user.Thu, 03 Sep 2026 00:00:00 GMT7-Ziphighcvehttps://0daynews.com/articles/2026-07-18-7-zip-26-02-xz-heap-overflow-rce-zdi-26-444/https://0daynews.com/articles/2026-07-18-7-zip-26-02-xz-heap-overflow-rce-zdi-26-444/7-Zip 26.02 fixes a heap-based buffer overflow in XZ decompression (ZDI-26-444) — RCE if a user opens a crafted archive, and there is no automatic update.Sat, 18 Jul 2026 21:00:00 GMT7-Ziparticle