7Z
Product
7-Zip
On CISA KEVExploited in the wild
33
CVEs
1
On KEV
8.8
Max CVSS
1
New 30D
Severity mix
Critical 0High 21Medium 6Low 4
Watch
Add 7-Zip to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2025-55188 | 3.6 | Aug 8 | 7-Zip before 25.01 does not always properly handle symbolic links during extraction Affected: before 25.01 |
| CVE-2026-58052 | 3.3 | Jun 28 | 7-Zip - Mark-of-the-Web Bypass via RAR5 Alternate Data Stream Name Collision Affected: through 26.01 |
| CVE-2022-47112 | 3.3 | Apr 19 | 7-Zip 22.01 does not report an error for certain invalid xz files, involving stream flags and reserved bits Affected: 22.01 |
| CVE-2022-47111 | 3.3 | Apr 19 | 7-Zip 22.01 does not report an error for certain invalid xz files, involving block flags and reserved bits Affected: 22.01 |
Showing 4