Vendor
Mcmilk
9 known vulnerabilities in products by Mcmilk, 1 of them actively exploited (CISA KEV).
Key figures
9
Vulnerabilities
1
Actively exploited (KEV)
0
Used by ransomware
1
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| Critical | CVE-2026-111497 | Out-of-Bounds Write in Google Brotli Decoder In CISA KEValso in 15 other products | 8.1 | |
| High | CVE-2026-48095 | Mcmilk 7-Zip: Out-of-bounds Write | 8.8 | |
| High | CVE-2026-48092 | 7-Zip SquashFS Fragment Offset Overflow (GHSL-2026-116) | 4.3 | |
| High | CVE-2026-48111 | GHSL-2026-121 7-Zip UEFI DEPEX OOB Read | 4.3 | |
| High | CVE-2026-48103 | GHSL-2026-119 7-Zip WIM SecurityId OOB read | 4.3 | |
| Medium | CVE-2026-48101 | GHSL-2026-117: 7-Zip UEFI Capsule uninitialized heap memory disclosure | 6.5 | |
| Medium | CVE-2026-48112 | GHSL-2026-122 7-Zip Ar SYMDEF OOB Read | 6.5 | |
| Medium | CVE-2026-48104 | GHSL-2026-120: 7-Zip SquashFS BlockToNode uninitialized heap read | 4.2 | |
| Medium | CVE-2026-48102 | GHSL-2026-118: 7-Zip UDF Field OOB Read | 3.1 |
News
- Adobe Commerce PolyShell Attacks Breach Hundreds of Stores as Brotli Exploit Traffic Emergesthehackernews,
- Node2Shell puts Microsoft and Node.js on Brotli patch dutycsoonline,
- PHP Issues Second Windows Security Update in Five Days to Fix Brotli Code Execution Flawthehackernews,
- Node2Shell CVEsfortinet-psirt,
- Brotli Decoder Flaw Behind Node.js RCE Also Affects Bun, Python and Other Widely Used Softwarethehackernews,
- Researchers Demonstrate Node2Shell RCE Exploit on Node.js Build Using Crafted Brotli Datathehackernews,
Products
| 7-Zip | 8 | 0 |