Skip to content
OpenAdvisories

Vendor

PeaZip

5 known vulnerabilities.

PeaZip at a glance

Last 12 months
4
Critical · all time
0
Exploited · all time
0
Public exploit · all time
0
New vulnerabilities per month · last 12 months
0 3 5 December 2025: 0 vulnerabilities Dec 2025 January 2026: 0 vulnerabilities February 2026: 0 vulnerabilities March 2026: 0 vulnerabilities Mar April 2026: 0 vulnerabilities May 2026: 0 vulnerabilities June 2026: 0 vulnerabilities Jun July 2026: 0 vulnerabilities August 2026: 0 vulnerabilities September 2026: 0 vulnerabilities Sep October 2026: 4 vulnerabilities November 2026: 0 vulnerabilities
Show as table
MonthVulnerabilitiesCritical
Nov 202600
Oct 202640
Sep 202600
Aug 202600
Jul 202600
Jun 202600
May 202600
Apr 202600
Mar 202600
Feb 202600
Jan 202600
Dec 202500
Nov 202500
Oct 202500
Sep 202500
Aug 202500
Jul 202500
Jun 202500
May 202500
Apr 202510
Mar 202500
Feb 202500
Jan 202500
Dec 202400

Products

PeaZip 5
All Critical High Medium Low Exploited only Public exploit

5 results · Feed

  • Medium 4.6
    CVE-2026-104024

    Incomplete dangerous-extension list in PeaZip object open allows execution of a program or command from a crafted archive entry without confirmation

    Incomplete List of Disallowed Inputs (CWE-184) in the dangerous-extension confirmation of the archive object viewer (peach.pas, grid_obj_open) in PeaZip 10.5.0 through 11.2.0 on Windows allows an attacker who convinces a victim to open an entry of a crafted a…

    PeaZip PeaZip
  • High 8.4
    CVE-2026-104025

    Path traversal in PeaZip object preview allows execution of arbitrary programs via a crafted archive entry name

    Path Traversal (CWE-22) in the execute_obj function of the archive object viewer (peach.pas) in PeaZip 11.2.0 and earlier on Windows allows an attacker who convinces a victim to preview an entry of a crafted archive via the "Preview with... -> Associated appl…

    PeaZip PeaZip
  • High 7.1
    CVE-2026-105050

    PeaZip before 11.3.0, in a non-default configuration, is vulnerable to OS command injection via a filename in an archiv…

    PeaZip PeaZip
  • High 8.4
    CVE-2026-102514

    Out-of-bounds write in PeaZip PEA extractor allows code execution via a crafted .pea archive

    Out-of-bounds Write (CWE-787) in the PEA archive extraction routine (pea.pas, unpea_procedure) of the first-party pea component in PeaZip 11.2.0 and earlier allows an attacker who convinces a victim to open or extract a crafted .pea archive to execute arbitra…

    PeaZip PeaZip
  • Medium 6.1
    CVE-2025-33026

    In PeaZip through 10.4.0, there is a Mark-of-the-Web Bypass Vulnerability. This vulnerability allows attackers to bypas…

    PeaZip PeaZip