7-Zip

7 results · Clear filters · Feed

• High 7.8
  CVE-2026-125742

  7-Zip before 26.06 Heap Out-of-Bounds Write via LZX Decoder in CAB Extraction

  7-Zip before 26.06 contains a heap out-of-bounds write vulnerability in the LZX decoder that lets attackers corrupt memory when a continuation CAB volume declares a smaller window. Attackers can entice victims to extract crafted multi-volume CAB archives, whe…

  7-Zip 7-Zip p7zip 7zip Debian
  Nov 10, 2026
• High 7.0
  CVE-2026-14266 Public exploit

  7-Zip XZ Decompression Heap-based Buffer Overflow Remote Code Execution Vulnerability

  7-Zip XZ Decompression Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of 7-Zip. User interaction is required to exploit this vulnerability in that …

  7-Zip 7-Zip p7zip 7zip Debian Ubuntu
  Jul 29, 2026
• High 7.0
  CVE-2025-11002

  7-Zip ZIP File Parsing Directory Traversal Remote Code Execution Vulnerability

  7-Zip ZIP File Parsing Directory Traversal Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of 7-Zip. Interaction with this product is required to exploit this vulnerability bu…

  7-Zip 7-Zip p7zip 7zip Debian Ubuntu
  Jan 23, 2026
• High 7.0
  CVE-2025-11001 Public exploit EPSS 27%

  7-Zip ZIP File Parsing Directory Traversal Remote Code Execution Vulnerability

  7-Zip ZIP File Parsing Directory Traversal Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of 7-Zip. Interaction with this product is required to exploit this vulnerability bu…

  7-Zip 7-Zip p7zip 7zip Debian Ubuntu
  Nov 19, 2025
• High 7.0
  CVE-2025-0411 Exploited Public exploit EPSS 48%

  7-Zip Mark-of-the-Web Bypass Vulnerability

  7-Zip Mark-of-the-Web Bypass Vulnerability. This vulnerability allows remote attackers to bypass the Mark-of-the-Web protection mechanism on affected installations of 7-Zip. User interaction is required to exploit this vulnerability in that the target must vi…

  7-Zip 7-Zip
  Jan 25, 2025

  KEV Feb 6, 2025
• High 7.8
  CVE-2024-11477 Public exploit EPSS 22%

  7-Zip Zstandard Decompression Integer Underflow Remote Code Execution Vulnerability

  7-Zip Zstandard Decompression Integer Underflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of 7-Zip. Interaction with this library is required to exploit this vulnerabili…

  7-Zip 7-Zip qt6-qtwebengine qt5-qtwebengine Debian Ubuntu Alpine
  Nov 22, 2024
• High 7.8
  CVE-2023-40481 EPSS 14%

  7-Zip SquashFS File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

  7-Zip SquashFS File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of 7-Zip. User interaction is required to exploit this vulnerability in that th…

  7-Zip 7-Zip p7zip 7zip Debian Ubuntu
  May 3, 2024