7zip

10 results · Clear filters · Feed

• High 7.8
  CVE-2026-125742

  7-Zip before 26.06 Heap Out-of-Bounds Write via LZX Decoder in CAB Extraction

  7-Zip before 26.06 contains a heap out-of-bounds write vulnerability in the LZX decoder that lets attackers corrupt memory when a continuation CAB volume declares a smaller window. Attackers can entice victims to extract crafted multi-volume CAB archives, whe…

  7-Zip 7-Zip p7zip 7zip Debian
  Nov 10, 2026
• High 7.0
  CVE-2026-14266 Public exploit

  7-Zip XZ Decompression Heap-based Buffer Overflow Remote Code Execution Vulnerability

  7-Zip XZ Decompression Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of 7-Zip. User interaction is required to exploit this vulnerability in that …

  7-Zip 7-Zip p7zip 7zip Debian Ubuntu
  Jul 29, 2026
• High 8.8
  CVE-2026-48095 Public exploit

  GHSL-2026-140_7-Zip: 7-Zip has a heap buffer overflow via NTFS compressed stream buffer under-allocation

  7-Zip is a file archiver with a high compression ratio. Versions 26.00 and prior contain a heap buffer overflow vulnerability caused by an under-allocation in the NTFS compressed stream buffer (GetCuSize shift UB), potentially allowing attackers to cause arbi…

  mcmilk 7-Zip p7zip 7zip Debian Ubuntu Alpine
  Jun 5, 2026
• High 7.0
  CVE-2025-11002

  7-Zip ZIP File Parsing Directory Traversal Remote Code Execution Vulnerability

  7-Zip ZIP File Parsing Directory Traversal Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of 7-Zip. Interaction with this product is required to exploit this vulnerability bu…

  7-Zip 7-Zip p7zip 7zip Debian Ubuntu
  Jan 23, 2026
• High 7.0
  CVE-2025-11001 Public exploit EPSS 27%

  7-Zip ZIP File Parsing Directory Traversal Remote Code Execution Vulnerability

  7-Zip ZIP File Parsing Directory Traversal Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of 7-Zip. Interaction with this product is required to exploit this vulnerability bu…

  7-Zip 7-Zip p7zip 7zip Debian Ubuntu
  Nov 19, 2025
• High 7.8
  CVE-2024-11477 Public exploit EPSS 22%

  7-Zip Zstandard Decompression Integer Underflow Remote Code Execution Vulnerability

  7-Zip Zstandard Decompression Integer Underflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of 7-Zip. Interaction with this library is required to exploit this vulnerabili…

  7-Zip 7-Zip qt6-qtwebengine qt5-qtwebengine Debian Ubuntu Alpine
  Nov 22, 2024
• High 8.4
  CVE-2023-52168

  The NtfsHandler.cpp NTFS handler in 7-Zip before 24.01 (for 7zz) contains a heap-based buffer overflow that allows an a…

  p7zip 7zip 7zip Debian Ubuntu
  Jul 3, 2024
• High 8.2
  CVE-2023-52169

  The NtfsHandler.cpp NTFS handler in 7-Zip before 24.01 (for 7zz) contains an out-of-bounds read that allows an attacker…

  p7zip 7zip 7zip Debian Ubuntu
  Jul 3, 2024
• High 7.8
  CVE-2023-40481 EPSS 14%

  7-Zip SquashFS File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

  7-Zip SquashFS File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of 7-Zip. User interaction is required to exploit this vulnerability in that th…

  7-Zip 7-Zip p7zip 7zip Debian Ubuntu
  May 3, 2024
• High 7.8
  CVE-2023-31102 EPSS 54%

  Ppmd7.c in 7-Zip before 23.00 allows an integer underflow and invalid read operation via a crafted 7Z archive.

  p7zip 7zip 7zip Debian Ubuntu
  Nov 3, 2023