PE
Vendor
PeaZip
6
CVEs
0
On KEV
4
New 30D
Products
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-104024 | PE PeaZip PeaZip | 4.6 | Oct 15 | Incomplete dangerous-extension list in PeaZip object open allows execution of a program or command from a crafted archive entry without confirmation |
| CVE-2026-104025 | PE PeaZip PeaZip | 8.4 | Oct 15 | Path traversal in PeaZip object preview allows execution of arbitrary programs via a crafted archive entry name |
| CVE-2026-105050 | PE PeaZip PeaZip | 7.1 | Oct 2 | PeaZip before 11.3.0, in a non-default configuration, is vulnerable to OS command injection via a filename in an archive because "quotation character already used in the string"… |
| CVE-2026-102514 | PE PeaZip PeaZip | 8.4 | Oct 1 | Out-of-bounds write in PeaZip PEA extractor allows code execution via a crafted .pea archive |
| CVE-2025-33026 | PE PeaZip PeaZip | 7.8 | Apr 15 | In PeaZip through 10.4.0, there is a Mark-of-the-Web Bypass Vulnerability |
| CVE-2023-6891 | PE Peazip Peazip | 7.8 | Dec 17 | PeaZip Library dragdropfilesdll.dll uncontrolled search path |