{"uuid": "182eabcb-955a-4f51-9bbd-f05d8114c92e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-14266", "type": "seen", "source": "https://thehackernews.com/2026/07/new-7-zip-vulnerability-could-let.html", "content": "Opening a crafted XZ archive in 7-Zip could let an attacker run code on the machine. The flaw, CVE-2026-14266, is a heap-based buffer overflow in how the archiver processes XZ chunked data, and Trend Micro's Zero Day Initiative (ZDI) detailed it on July 15. A fix shipped on June 25 in 7-Zip 26.02.\n\nThe overflow lets an attacker \"execute code in the context of the current process,\" per the", "creation_timestamp": "2026-07-20T13:00:41.791540Z"}