Piece of news of the day
ADVANCED SECURITY EUROPA
EOODStay Secure: Update to 7-Zip Version 26.02 to Patch Remote Code Execution Vulnerability
19 July 20267-Zip version 26.02 was released to address a remote code execution vulnerability found in its handling of XZ-compressed data.
The flaw, discovered by researcher Landon Peng, could be exploited by convincing users to open specially crafted compressed files.
The vulnerability could lead to a heap-based buffer overflow, allowing attackers to execute malicious code.
The security fix must be manually installed as 7-Zip does not have an automatic update feature.
Due to its popularity among Windows users, vulnerabilities in 7-Zip are attractive targets for threat actors.
While there are no reports of active exploits, users are advised to update to version 26.02 promptly to mitigate the risk of potential attacks.
