Advisories · Technology
7-Zip.
Every CVE that names 7-Zip among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 6.8 Medium
7-Zip < 26.03 SquashFS Uninitialized Memory Disclosure via UID/GID Table
- 7-Zip
- Memory corruption
- CVSS 7.0 High
7-Zip XZ Decompression Heap-based Buffer Overflow Remote Code Execution Vulnerability
- 7-Zip
- Memory corruption
- CVSS 4.8 Medium
7-Zip - Mark-of-the-Web Bypass via RAR5 Alternate Data Stream Name Collision
- 7-Zip
- CWE-693
- CVSS 7.0 High
7-Zip ZIP File Parsing Directory Traversal Remote Code Execution Vulnerability
- 7-Zip
- Path traversal
- CVSS 7.0 HighCritical · CVSS 7+ and EPSS
7-Zip ZIP File Parsing Directory Traversal Remote Code Execution Vulnerability
- 7-Zip
- Path traversal
- CVSS 3.6 Low
Symlink following in 7-Zip
- 7-Zip
- Path traversal
- CVSS 2.5 Low
Improper check for unusual conditions in 7-Zip
- 7-Zip
- CWE-754
- CVSS 2.5 Low
Improper check for unusual conditions in 7-Zip
- 7-Zip
- CWE-754
- CVSS 7.0 HighCritical · KEV, CVSS 7+ and EPSSKEV
7-Zip Mark-of-the-Web Bypass Vulnerability
- 7-Zip
- CWE-693
- CVSS 7.8 HighCritical · CVSS 7+ and EPSS
7-Zip Zstandard Decompression Integer Underflow Remote Code Execution Vulnerability
- 7-Zip
- Memory corruption
- CVSS 6.5 Medium
7-Zip CopyCoder Infinite Loop Denial-of-Service Vulnerability
- 7-Zip
- Denial of service
- CVSS 7.8 HighCritical · CVSS 7+ and EPSS
7-Zip SquashFS File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability
- 7-Zip
- Memory corruption