Skip to content
OpenAdvisories

Vendor

7-Zip

13 known vulnerabilities.

Products

7-Zip 13
All Critical High Medium Low Exploited only Public exploit

4 results · Clear filters · Feed

  • Low 3.3
    CVE-2026-58052

    7-Zip - Mark-of-the-Web Bypass via RAR5 Alternate Data Stream Name Collision

    7-Zip for Windows through 26.01 fails to preserve the Mark-of-the-Web when extracting a crafted RAR5 archive, because its guard that suppresses an archive-supplied Zone.Identifier stream matches the exact name 'Zone.Identifier' while a RAR5 STM record named '…

    7-Zip 7-Zip p7zip 7zip Debian
  • Low 3.6
    CVE-2025-55188 Public exploit

    7-Zip before 25.01 does not always properly handle symbolic links during extraction.

    7-Zip 7-Zip p7zip 7zip Debian Ubuntu
  • Low 2.5
    CVE-2022-47111

    7-Zip 22.01 does not report an error for certain invalid xz files, involving block flags and reserved bits. Some later …

    7-Zip 7-Zip p7zip 7zip Debian Ubuntu
  • Low 2.5
    CVE-2022-47112

    7-Zip 22.01 does not report an error for certain invalid xz files, involving stream flags and reserved bits. Some later…

    7-Zip 7-Zip p7zip 7zip Debian Ubuntu