7-Zip Fixes RCE Flaw Exploitable With Malicious Archives

2026-07-22

The popular 7-Zip Windows archive tool released an update to fix a heap-based buffer overflow vulnerability that could be exploited by attackers to achieve arbitrary code execution. The vulnerability exists in 7-Zip's processing of XZ-compressed data. 7-Zip does not have automatic update functionality, so users will need to manually download the new version to update.