7-ZIP VULNERABILITY LETS ATTACKERS EXECUTE ARBITRARY CODE

Summary from the TLDR InfoSec newsletter

7-Zip has released an update for a high (7.8) vulnerability that can allow for RCE. The vulnerability exists in the implementation of the Zstandard decompression where improper validation of user-supplied data can result in an integer underflow before writing to memory. It allows attackers to run arbitrary code under the current user.