heap-exploitation 1 7-Zip Cabinet Window Desync: From Heap OOB Write to Remote Code Execution Nov 10, 2026