7-Zip

Products

ProductCVEsExploitedLatest
7-Zip121Oct 14, 2026

Exploited and recent CVEs

  • CVE-2025-0411 High 7.0 Exploited 7-Zip Mark-of-the-Web Bypass Vulnerability 47.6%
  • CVE-2026-104086 Medium 5.5 7-Zip < 26.03 SquashFS Uninitialized Memory Disclosure via UID/GID Table 0.2%
  • CVE-2026-14266 High 7.0 7-Zip XZ Decompression Heap-based Buffer Overflow Remote Code Execution Vulnerability 0.7%
  • CVE-2026-58052 Low 3.3 7-Zip - Mark-of-the-Web Bypass via RAR5 Alternate Data Stream Name Collision 0.2%
  • CVE-2025-11002 High 7.0 7-Zip ZIP File Parsing Directory Traversal Remote Code Execution Vulnerability 0.5%
  • CVE-2025-11001 High 7.0 7-Zip ZIP File Parsing Directory Traversal Remote Code Execution Vulnerability 27.4%
  • CVE-2025-55188 Low 3.6 7-Zip before 25.01 does not always properly handle symbolic links during extraction. 1.0%
  • CVE-2022-47111 Low 2.5 7-Zip 22.01 does not report an error for certain invalid xz files, involving block flags and reserved bits. Some later versions are unaffected. 0.2%
  • CVE-2022-47112 Low 2.5 7-Zip 22.01 does not report an error for certain invalid xz files, involving stream flags and reserved bits. Some later versions are unaffected. 0.2%
  • CVE-2024-11477 High 7.8 7-Zip Zstandard Decompression Integer Underflow Remote Code Execution Vulnerability 22.4%
  • CVE-2024-11612 Medium 6.5 7-Zip CopyCoder Infinite Loop Denial-of-Service Vulnerability 1.9%
  • CVE-2023-40481 High 7.8 7-Zip SquashFS File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability 13.8%