7 Zip

4 CVEs product

Monthly

CVE-2025-11002 HIGH PATCH This Week

7-Zip ZIP File Parsing Directory Traversal Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of 7-Zip. [CVSS 7.8 HIGH]

RCE Path Traversal 7 Zip Suse
NVD
CVSS 3.1
7.8
EPSS
0.1%
CVE-2025-11001 HIGH POC PATCH This Month

7-Zip ZIP File Parsing Directory Traversal Remote Code Execution Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

Path Traversal RCE 7 Zip Suse
NVD Exploit-DB VulDB
CVSS 3.1
7.8
EPSS
0.2%
CVE-2025-55188 LOW POC Monitor

7-Zip before 25.01 does not always properly handle symbolic links during extraction. Rated low severity (CVSS 3.6), this vulnerability is no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

Information Disclosure 7 Zip
NVD GitHub
CVSS 3.1
3.6
EPSS
0.0%
CVE-2025-0411 HIGH KEV PATCH THREAT Act Now

7-Zip contains a Mark-of-the-Web bypass vulnerability allowing attackers to circumvent Windows security warnings when extracting files from malicious archives, exploited in campaigns targeting Ukrainian organizations.

RCE Active Iq Unified Manager 7 Zip Suse
NVD
CVSS 3.1
7.0
EPSS
52.4%
CVE-2025-11002
EPSS 0% CVSS 7.8
HIGH PATCH This Week

7-Zip ZIP File Parsing Directory Traversal Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of 7-Zip. [CVSS 7.8 HIGH]

RCE Path Traversal 7 Zip +1
NVD
CVE-2025-11001
EPSS 0% CVSS 7.8
HIGH POC PATCH This Month

7-Zip ZIP File Parsing Directory Traversal Remote Code Execution Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

Path Traversal RCE 7 Zip +1
NVD Exploit-DB VulDB
CVE-2025-55188
EPSS 0% CVSS 3.6
LOW POC Monitor

7-Zip before 25.01 does not always properly handle symbolic links during extraction. Rated low severity (CVSS 3.6), this vulnerability is no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

Information Disclosure 7 Zip
NVD GitHub
CVE-2025-0411
EPSS 52% CVSS 7.0
HIGH KEV PATCH THREAT Act Now

7-Zip contains a Mark-of-the-Web bypass vulnerability allowing attackers to circumvent Windows security warnings when extracting files from malicious archives, exploited in campaigns targeting Ukrainian organizations.

RCE Active Iq Unified Manager 7 Zip +1
NVD

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy