https://seclists.org/oss-sec/2026/q3/169: 7-Zip XZ Decompssion Heap-based Buffer Overflow mote Code Execution Vulnerability
Published Jul 17, 2026
·Updated
Affected Software
1 affected component
7-Zip 7-Zip<26.02
Frequently Asked Questions
1
What is the severity of CVE-2026-14266?
CVE-2026-14266 has a CVSS score of 7.0, indicating a high severity vulnerability.
2
How do I fix CVE-2026-14266?
To fix CVE-2026-14266, update your 7-Zip software to the latest version provided by the vendor.
3
What type of vulnerability is CVE-2026-14266?
CVE-2026-14266 is identified as a heap-based buffer overflow vulnerability.
4
Can CVE-2026-14266 allow for remote code execution?
Yes, CVE-2026-14266 allows for remote code execution when processing specially crafted files.
5
Which versions of 7-Zip are affected by CVE-2026-14266?
All versions of 7-Zip that are vulnerable to CVE-2026-14266 should be updated to avoid exploitation.