Skip to content
OpenAdvisories

Vendor

7-Zip

13 known vulnerabilities.

Products

5 results · Clear filters · Feed

  • High 7.0
    CVE-2026-14266 Public exploit

    7-Zip XZ Decompression Heap-based Buffer Overflow Remote Code Execution Vulnerability

    7-Zip XZ Decompression Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of 7-Zip. User interaction is required to exploit this vulnerability in that …

  • High 7.0
    CVE-2025-11001 Public exploit EPSS 27%

    7-Zip ZIP File Parsing Directory Traversal Remote Code Execution Vulnerability

    7-Zip ZIP File Parsing Directory Traversal Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of 7-Zip. Interaction with this product is required to exploit this vulnerability bu…

  • Low 3.6
    CVE-2025-55188 Public exploit

    7-Zip before 25.01 does not always properly handle symbolic links during extraction.

  • High 7.0
    CVE-2025-0411 Exploited Public exploit EPSS 48%

    7-Zip Mark-of-the-Web Bypass Vulnerability

    7-Zip Mark-of-the-Web Bypass Vulnerability. This vulnerability allows remote attackers to bypass the Mark-of-the-Web protection mechanism on affected installations of 7-Zip. User interaction is required to exploit this vulnerability in that the target must vi…

    KEV Feb 6, 2025
  • High 7.8
    CVE-2024-11477 Public exploit EPSS 22%

    7-Zip Zstandard Decompression Integer Underflow Remote Code Execution Vulnerability

    7-Zip Zstandard Decompression Integer Underflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of 7-Zip. Interaction with this library is required to exploit this vulnerabili…