Socprime Critical Vulnerabilities in 7-Zip Enable Code Execution Attacks
Article Content
- •7-Zip version 26.00 has a critical heap buffer overflow vulnerability (CVE-2026-48095).
- •Attackers can exploit this flaw via crafted NTFS archive files to execute arbitrary code.
- •Users are urged to update 7-Zip to the latest version to protect against these vulnerabilities.
A critical heap buffer overflow vulnerability has been identified in 7-Zip version 26.00, allowing attackers to execute arbitrary code through a vtable hijack. This flaw, tracked as CVE-2026-48095 and assigned advisory GHSL-2026-140, affects the NTFS archive handler, specifically within the CInStream::GetCuSize() function in NtfsHandler.cpp. Attackers can exploit this vulnerability by crafting malicious archive files that, when opened by victims, can lead to remote code execution and sensitive data leakage. The GitHub Security Lab has disclosed this vulnerability, emphasizing its severity. Users of 7-Zip are advised to update to the latest version to mitigate risks associated with this flaw.
Ask AI about this cluster
Answers cite the sources they use
Timeline
More articles in this cluster (8)
Following this threat?
Track GitHub Security Lab and CVE-2026-48095 in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.
Free account · no card needed
Continue Reading
Critical BeyondTrust 9.3 Vulnerability Actively Exploited by Threat Actor A critical vulnerability (CVE-2026-102764) in BeyondTrust Remote Support has been discovered and is actively being exploited by the threat group ARMORY CASTLE, reportedly linked to China. The vulnerability, which has a CVSS score of 9.3, allows unauthenticated attackers to upload files and potentially compromise host…