CyberSecBulletin

Mcmilk vulnerabilities

We track 4 vulnerabilities in Mcmilk products. 4 are rated high or critical, and none are known to be exploited. The most recent was published on June 5, 2026.

4vulnerabilities
0critical
4high
0exploited
7.8average CVSS score

Latest Mcmilk vulnerabilities

  • 7.1 High severity

    7-Zip: Out-of-bounds Read

    CVE-2026-48111McmilkEPSS 2.16%

    7-Zip is a file archiver with a high compression ratio. Versions 9.21 through 26.00 contain an off-by-one out-of-bounds read vulnerability in the ParseDepedencyExpression function of the UEFI firmware image parser(CPP/7zip/Archive/UefiHandler.cpp). The functio

  • 7.1 High severity

    7-Zip: Out-of-bounds Read

    CVE-2026-48103McmilkEPSS 2.16%

    7-Zip is a file archiver with a high compression ratio. Versions 9.34 through 26.00 contain an off-by-one heap out-of-bounds read in the WIM (Windows Imaging) archive handler's security descriptor lookup. In CHandler::GetSecurity (CPP/7zip/Archive/Wim/WimHandl

  • 8.8 High severity

    7-Zip: Integer Overflow or Wraparound

    CVE-2026-48095McmilkEPSS 1.12%

    7-Zip is a file archiver with a high compression ratio. Versions 26.00 and prior contain a heap buffer overflow vulnerability caused by an under-allocation in the NTFS compressed stream buffer (GetCuSize shift UB), potentially allowing attackers to cause arbit

  • 8.1 High severity

    7-Zip: Out-of-bounds Read

    CVE-2026-48092McmilkEPSS 2.74%

    7-Zip is a file archiver with a high compression ratio. Versions 9.34 through 26.00 contain a heap memory disclosure via SquashFS fragment offset integer overflow on 32-bit builds. 32-bit integer overflow in the SquashFS ReadBlock function allows an attacker-c