7Z
Vendor
7-Zip
38
CVEs
1
On KEV
1
New 30D
Products
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-104086 | 7Z 7-Zip 7-Zip | 5.5 | Oct 14 | 7-Zip < 26.03 SquashFS Uninitialized Memory Disclosure via UID/GID Table |
| CVE-2026-14266 | 7Z 7-Zip 7-Zip | 7.8 | Jul 29 | 7-Zip XZ Decompression Heap-based Buffer Overflow Remote Code Execution Vulnerability |
| CVE-2026-58052 | 7Z 7-Zip 7-Zip | 3.3 | Jun 28 | 7-Zip - Mark-of-the-Web Bypass via RAR5 Alternate Data Stream Name Collision |
| CVE-2026-48112 | 7Z 7-zip 7-zip | 6.5 | Jun 5 | GHSL-2026-122 7-Zip Ar SYMDEF OOB Read |
| CVE-2026-48111 | 7Z 7-zip 7-zip | 7.1 | Jun 5 | GHSL-2026-121 7-Zip UEFI DEPEX OOB Read |
| CVE-2026-48104 | 7Z 7-zip 7-zip | 4.2 | Jun 5 | GHSL-2026-120: 7-Zip SquashFS BlockToNode uninitialized heap read |
| CVE-2026-48103 | 7Z 7-zip 7-zip | 7.1 | Jun 5 | GHSL-2026-119 7-Zip WIM SecurityId OOB read |
| CVE-2026-48102 | 7Z 7-zip 7-zip | 4.3 | Jun 5 | GHSL-2026-118: 7-Zip UDF Field OOB Read |
| CVE-2026-48101 | 7Z 7-zip 7-zip | 6.5 | Jun 5 | GHSL-2026-117: 7-Zip UEFI Capsule uninitialized heap memory disclosure |
| CVE-2026-48095 | 7Z 7-zip 7-zip | 8.8 | Jun 5 | GHSL-2026-140_7-Zip: 7-Zip has a heap buffer overflow via NTFS compressed stream buffer under-allocation |
| CVE-2026-48092 | 7Z 7-zip 7-zip | 8.1 | Jun 5 | 7-Zip SquashFS Fragment Offset Overflow (GHSL-2026-116) |
| CVE-2025-11002 | 7Z 7-Zip 7-Zip | 7.8 | Jan 23 | 7-Zip ZIP File Parsing Directory Traversal Remote Code Execution Vulnerability |
| CVE-2025-11001 | 7Z 7-zip 7-zip | 7.8 | Nov 19 | 7-Zip ZIP File Parsing Directory Traversal Remote Code Execution Vulnerability |
| CVE-2025-55188 | 7Z 7-zip 7-zip | 3.6 | Aug 8 | 7-Zip before 25.01 does not always properly handle symbolic links during extraction |
| CVE-2025-53817 | 7Z 7-zip 7-zip | 7.5 | Jul 17 | 7-Zip is a file archiver with a high compression ratio |
| CVE-2025-53816 | 7Z 7-zip 7-zip | 7.5 | Jul 17 | 7-Zip is a file archiver with a high compression ratio |
| CVE-2022-47112 | 7Z 7-zip 7-zip | 3.3 | Apr 19 | 7-Zip 22.01 does not report an error for certain invalid xz files, involving stream flags and reserved bits |
| CVE-2022-47111 | 7Z 7-zip 7-zip | 3.3 | Apr 19 | 7-Zip 22.01 does not report an error for certain invalid xz files, involving block flags and reserved bits |
| CVE-2025-0411 In wildKEV | 7Z 7-Zip 7-Zip | 7.0 | Jan 25 | 7-Zip Mark-of-the-Web Bypass Vulnerability |
| CVE-2024-11612 | 7Z 7-zip 7-zip | 6.5 | Nov 22 | 7-Zip CopyCoder Infinite Loop Denial-of-Service Vulnerability |
| CVE-2024-11477 | 7Z 7-zip 7-zip | 7.8 | Nov 22 | 7-Zip Zstandard Decompression Integer Underflow Remote Code Execution Vulnerability |
| CVE-2023-40481 | 7Z 7-zip 7-zip | 7.8 | May 3 | 7-Zip SquashFS File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability |
| CVE-2023-31102 | 7Z 7-zip 7-zip | 7.8 | Nov 3 | Ppmd7.c in 7-Zip before 23.00 allows an integer underflow and invalid read operation via a crafted 7Z archive |
| CVE-2022-47069 | P7 P7zip 7-zip | 7.8 | Aug 22 | p7zip 16.02 was discovered to contain a heap-buffer-overflow vulnerability via the function NArchive::NZip::CInArchive::FindCd(bool) at CPP/7zip/Archive/Zip/ZipIn.cpp |
| CVE-2022-29072 | 7Z 7-zip 7-zip | 7.8 | Apr 15 | 7-Zip through 21.07 on Windows allows privilege escalation and command execution when a file with the .7z extension is dragged to the Help>Contents area |
| CVE-2018-10115 | 7Z 7-zip 7-zip | 7.8 | May 2 | Incorrect initialization logic of RAR decoder objects in 7-Zip 18.03 and before can lead to usage of uninitialized memory, allowing remote attackers to cause a denial of service… |
| CVE-2018-10172 | 7Z 7-zip 7-zip | 8.8 | Apr 16 | 7-Zip through 18.01 on Windows implements the "Large memory pages" option by calling the LsaAddAccountRights function to add the SeLockMemoryPrivilege privilege to the user's… |
| CVE-2018-5996 | 7Z 7-zip 7-zip | 7.8 | Jan 31 | Insufficient exception handling in the method NCompress::NRar3::CDecoder::Code of 7-Zip before 18.00 and p7zip can lead to multiple memory corruptions within the PPMd code, allows… |
| CVE-2017-17969 | P7 P7zip 7-zip | 7.8 | Jan 30 | Heap-based buffer overflow in the NCompress::NShrink::CDecoder::CodeReal method in 7-Zip before 18.00 and p7zip allows remote attackers to cause a denial of service (out-of-bounds… |
| CVE-2016-7804 | 7Z 7-zip 7-zip | 7.8 | May 22 | Untrusted search path vulnerability in 7 Zip for Windows 16.02 and earlier allows remote attackers to gain privileges via a Trojan horse DLL in an unspecified directory |
| CVE-2016-2334 | 7Z 7-zip 7-zip | 7.8 | Dec 13 | Heap-based buffer overflow in the NArchive::NHfs::CHandler::ExtractZlibFile method in 7zip before 16.00 and p7zip allows remote attackers to execute arbitrary code via a crafted… |
| CVE-2016-9296 | P7 P7zip 7-zip | 7.5 | Nov 12 | A null pointer dereference bug affects the 16.02 and many old versions of p7zip |
| CVE-2016-2335 | 7Z 7-zip 7-zip | 8.8 | Jun 7 | The CInArchive::ReadFileItem method in Archive/Udf/UdfIn.cpp in 7zip 9.20 and 15.05 beta and p7zip allows remote attackers to cause a denial of service (out-of-bounds read) or… |
| CVE-2015-1038 | P7 P7zip 7-zip | – | Jan 21 | p7zip 9.20.1 allows remote attackers to write to arbitrary files via a symlink attack in an archive |
| CVE-2008-6536 | 7Z 7-zip 7-zip | – | Mar 30 | Unspecified vulnerability in 7-zip before 4.5.7 has unknown impact and remote attack vectors, as demonstrated by the PROTOS GENOME test suite for Archive Formats (c10) |
| CVE-2007-4725 | 7Z 7-zip 7-zip | – | Sep 5 | Stack consumption vulnerability in AkkyWareHOUSE 7-zip32.dll before 4.42.00.04, as derived from Igor Pavlov 7-Zip before 4.53 beta, allows user-assisted remote attackers to… |