Mcmilk

9 CVEs in 2 Mcmilk products, including 7-Zip, 7-Zip-Zstd. Newest: CVE-2026-111497 (2026-10-22). Severity, EPSS and public exploits for each.

Mcmilk products with known CVEs

ProductCVEs
7-Zip8
7-Zip-Zstd1
Mcmilk CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2026-111497Critical9.82026-10-22A buffer overflow vulnerability in the Brotli decoder (c/dec/decode.c) in Google Brotli versions 1.0.3 through 1.2.0 on all platforms allows a remote unauthent…
CVE-2026-48112Medium6.52026-06-057-Zip is a file archiver with a high compression ratio. Versions 9.18 through 26.00 contain a heap out-of-bounds read in 7-Zip Ar handler BSD SYMDEF parser. A…
CVE-2026-48111Medium4.32026-06-057-Zip is a file archiver with a high compression ratio. Versions 9.21 through 26.00 contain an off-by-one out-of-bounds read vulnerability in the ParseDepedenc…
CVE-2026-48104Medium4.22026-06-057-Zip is a file archiver with a high compression ratio. Versions 9.18 through 26.00 contain an uninitialized heap read in the SquashFS archive handler caused b…
CVE-2026-48103Medium4.32026-06-057-Zip is a file archiver with a high compression ratio. Versions 9.34 through 26.00 contain an off-by-one heap out-of-bounds read in the WIM (Windows Imaging)…
CVE-2026-48102Low3.12026-06-057-Zip is a file archiver with a high compression ratio. Versions 9.11 through 26.00 contain a heap out-of-bounds read of up to 3 bytes in the UDF disc image ha…
CVE-2026-48101Medium6.52026-06-057-Zip is a file archiver with a high compression ratio. Versions 9.21 through 26.00 contain an An uninitialized memory disclosure vulnerability in the UEFI cap…
CVE-2026-48095High8.82026-06-057-Zip is a file archiver with a high compression ratio. Versions 26.00 and prior contain a heap buffer overflow vulnerability caused by an under-allocation in…
CVE-2026-48092Medium4.32026-06-057-Zip is a file archiver with a high compression ratio. Versions 9.34 through 26.00 contain a heap memory disclosure via SquashFS fragment offset integer overf…