https://hackingpassion.com/tags/7zip/Recent content in 7Zip on HackingPassion.com : root@HackingPassion.com-[~]HugoenMon, 20 Jul 2026 15:55:24 +0200https://hackingpassion.com/7-zip-xz-heap-overflow/Mon, 20 Jul 2026 15:55:24 +0200https://hackingpassion.com/7-zip-xz-heap-overflow/<p>You opened an archive in 7-Zip, and the code that let it take over your machine had been sitting there since 2018. It was quietly patched on June 25. You were not told what it fixed until three weeks later.</p> <p>On July 15, the Zero Day Initiative laid out the details in advisory <strong>ZDI-26-444</strong>, tracked as <strong>CVE-2026-14266</strong>. It described a flaw in 7-Zip that lets a malicious archive run code the moment you open it. Before that day, the only thing 7-Zip had said about it was a June release that explained nothing.</p>