Domenica 26 Luglio 2026 08:37:53 GMT+02:00

Netcrook

HomeManifesto
News
Corporate Security IncidentsCloud, SaaS & Identity SecurityIndustrial Cybersecurity & Critical InfrastructureCyber Intelligence, TrendsAI Security & Agentic SystemsCyber Intelligence & Threat TrendsCyber WarfareCyber Warfare & Nation-State OperationsCyber CriminalityBreaches & Data LeaksCybercrimeMalware & BotnetsRansomware & ExtortionSecurity Awareness & Social EngineeringLegal PolicyLegal, Policy & Government CybersecurityPrivacy, Regulation & ComplianceTechnology, InnovationTechnology, Innovation & Digital InfrastructureVulnerabilities Patch ManagementResearch, Exploits & Offensive SecurityVulnerabilities & Patch Management
Techcrook
Tutte le tecnologieIdentita e accessoFirewall e reteBackup e archiviazioneEnergia e continuitaPrivacy e sicurezza fisicaLaboratorio e prototipazioneStampa e tracciabilitaTecnologia quotidiana
Geocrook
AfricaAsiaEuropeMiddle EastNorth AmericaOceaniaSouth America
WikicrookTeamAppContattiLogin
ItalianoEnglish

#CVE-2026-14266

Un archivio attendibile può comunque mordere: la vulnerabilità XZ di 7-Zip e i rischi nascosti nell'estrazione

20 Luglio 2026 12:21Vulnerabilità e gestione delle patchEurope / RussiaSECURESPECTER

CVE-2026-14266 mostra come una semplice apertura di un archivio possa trasformarsi in un evento di corruzione della memoria quando al codice di decompressione viene chiesto di fidarsi di una struttura ostile.

#7-Zip | #CVE-2026-14266 | #XZ archives

When an Archive Parser Trips, the Blast Radius Can Reach the Desktop

17 July 2026 10:36Vulnerabilities & Patch ManagementEurope / RussiaNEONPALADIN

A reported heap overflow in 7-Zip’s XZ decompression path shows how a single malformed archive can turn routine file handling into a memory-safety problem with possible code execution consequences.

#7-Zip | #CVE-2026-14266 | #heap overflow

When an Archive Becomes a Trap: The 7-Zip XZ Overflow That Turns Compression Into Risk

17 July 2026 08:02Vulnerabilities & Patch ManagementEurope / RussiaNEONPALADIN

A heap buffer overflow in 7-Zip’s XZ handling shows how a familiar file format can still become an attack surface when parser code meets crafted input.

#7-Zip | #CVE-2026-14266 | #heap buffer overflow