Advisories · Technology

PeaZip.

Every CVE that names PeaZip among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-104024 CVE record

CVSS 4.6 Medium

Incomplete dangerous-extension list in PeaZip object open allows execution of a program or command from a crafted archive entry without confirmation
- PeaZip
- CWE-184
- CWE-693
Not analysed yet 15 Oct 2026
CVE-2026-104025 CVE record

CVSS 8.4 High

Path traversal in PeaZip object preview allows execution of arbitrary programs via a crafted archive entry name
- PeaZip
- Path traversal
- CWE-693
Not analysed yet 15 Oct 2026
CVE-2026-105050 CVE record

CVSS 7.1 High

PeaZip: PeaZip before 11.3.0, in a non-default configuration…
- PeaZip
- CWE-180
Not analysed yet 2 Oct 2026
CVE-2026-102514 CVE record

CVSS 8.4 High

Out-of-bounds write in PeaZip PEA extractor allows code execution via a crafted .pea archive
- PeaZip
- Memory corruption
- CWE-1284
Not analysed yet 1 Oct 2026
CVE-2025-33026 CVE record

CVSS 6.1 Medium

In PeaZip through 10.4.0, there is a Mark-of-the-Web Bypass Vulnerability.
- PeaZip
- CWE-830
Not analysed yet 15 Apr 2025
CVE-2023-6891 CVE record

CVSS 5.3 Medium

PeaZip Library dragdropfilesdll.dll uncontrolled search path
- PeaZip
- CWE-427
Not analysed yet 17 Dec 2023