{"uuid": "b0ad1c27-be6c-437b-9647-f97d3c239874", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-14266", "type": "seen", "source": "https://thehackernews.com/2026/07/new-7-zip-vulnerability-could-let.html", "content": "Opening a crafted XZ archive in 7-Zip could let an attacker run code on the machine. The flaw, CVE-2026-14266, is a heap-based buffer overflow in how the archiver processes XZ chunked data, and Trend Micro's Zero Day Initiative (ZDI) detailed it on July 15. A fix shipped on June 25 in 7-Zip 26.02.\n\nThe overflow lets an attacker \"execute code in the context of the current process,\" per the", "creation_timestamp": "2026-07-21T01:00:54.988462Z"}