Browse CVEs

HIGH 7.8 CVE-2026-14266 7-Zip XZ Decompression Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrar… 7 Zip 26.02+ Fix from $1,9502026-07-29 MEDIUM 6.5 CVE-2026-48112 7-Zip is a file archiver with a high compression ratio. Versions 9.18 through 26.00 contain a heap out-of-bounds read in 7-Zip Ar handler BSD SYMDEF … 7 Zip 26.01+ Fix from $1,6002026-06-05 HIGH 7.1 CVE-2026-48103 7-Zip is a file archiver with a high compression ratio. Versions 9.34 through 26.00 contain an off-by-one heap out-of-bounds read in the WIM (Windows… 7 Zip 26.01+ Fix from $1,9502026-06-05 HIGH 7.1 CVE-2026-48111 7-Zip is a file archiver with a high compression ratio. Versions 9.21 through 26.00 contain an off-by-one out-of-bounds read vulnerability in the Par… 7 Zip 26.01+ Fix from $1,9502026-06-05 MEDIUM 6.5 CVE-2026-48101 7-Zip is a file archiver with a high compression ratio. Versions 9.21 through 26.00 contain an An uninitialized memory disclosure vulnerability in th… 7 Zip 26.01+ Fix from $1,6002026-06-05 HIGH 8.8 CVE-2026-48095 7-Zip is a file archiver with a high compression ratio. Versions 26.00 and prior contain a heap buffer overflow vulnerability caused by an under-allo… 7 Zip 26.01+ Fix from $1,9502026-06-05 HIGH 8.1 CVE-2026-48092 7-Zip is a file archiver with a high compression ratio. Versions 9.34 through 26.00 contain a heap memory disclosure via SquashFS fragment offset int… 7 Zip 26.01+ Fix from $1,9502026-06-05 HIGH 7.8 CVE-2025-11002 7-Zip ZIP File Parsing Directory Traversal Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code … 7 Zip Mitigation only Fix from $1,9502026-01-23 HIGH 7.8 CVE-2025-11001EPSS 27% 7-Zip ZIP File Parsing Directory Traversal Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code … 7 Zip Mitigation only Fix from $1,9502025-11-19 HIGH 7.5 CVE-2025-53816 7-Zip is a file archiver with a high compression ratio. Zeroes written outside heap buffer in RAR5 handler may lead to memory corruption and denial o… 7 Zip 25.00+ Fix from $1,9502025-07-17 HIGH 7.5 CVE-2025-53817 7-Zip is a file archiver with a high compression ratio. 7-Zip supports extracting from Compound Documents. Prior to version 25.0.0, a null pointer de… 7 Zip 25.00+ Fix from $1,9502025-07-17 MEDIUM 6.5 CVE-2024-11612 7-Zip CopyCoder Infinite Loop Denial-of-Service Vulnerability. This vulnerability allows remote attackers to create a denial-of-service condition on … 7 Zip 24.08+ Fix from $1,6002024-11-22 HIGH 7.8 CVE-2024-11477EPSS 22% 7-Zip Zstandard Decompression Integer Underflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary … 7 Zip 24.07+ Fix from $1,9502024-11-22 HIGH 7.8 CVE-2023-40481EPSS 27% 7-Zip SquashFS File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary … 7 Zip Mitigation only Fix from $1,9502024-05-03 HIGH 7.8 CVE-2023-31102EPSS 71% Ppmd7.c in 7-Zip before 23.00 allows an integer underflow and invalid read operation via a crafted 7Z archive. 7 Zip 22.01+ Fix from $1,9502023-11-03 HIGH 7.8 CVE-2022-47069 p7zip 16.02 was discovered to contain a heap-buffer-overflow vulnerability via the function NArchive::NZip::CInArchive::FindCd(bool) at CPP/7zip/Arch… P7zip No fix yet Fix from $1,9502023-08-22 HIGH 7.8 CVE-2022-29072 7-Zip through 21.07 on Windows allows privilege escalation and command execution when a file with the .7z extension is dragged to the Help>Contents a… 7 Zip after 21.07 Fix from $1,9502022-04-15 HIGH 7.8 CVE-2018-10115 Incorrect initialization logic of RAR decoder objects in 7-Zip 18.03 and before can lead to usage of uninitialized memory, allowing remote attackers … 7 Zip after 18.03 Fix from $1,9502018-05-02 HIGH 8.8 CVE-2018-10172 7-Zip through 18.01 on Windows implements the "Large memory pages" option by calling the LsaAddAccountRights function to add the SeLockMemoryPrivileg… 7 Zip after 18.01 Fix from $1,9502018-04-16 HIGH 7.8 CVE-2016-7804 Untrusted search path vulnerability in 7 Zip for Windows 16.02 and earlier allows remote attackers to gain privileges via a Trojan horse DLL in an un… 7 Zip after 16.02 Fix from $1,9502017-05-22 HIGH 7.5 CVE-2016-9296EPSS 7% A null pointer dereference bug affects the 16.02 and many old versions of p7zip. A lack of null pointer check for the variable folders.PackPositions … P7zip Patch available Fix from $1,9502016-11-12 HIGH 10.0 CVE-2008-6536 Unspecified vulnerability in 7-zip before 4.5.7 has unknown impact and remote attack vectors, as demonstrated by the PROTOS GENOME test suite for Arc… 7 Zip after 4.56 Fix from $1,9502009-03-30 MEDIUM 6.8 CVE-2007-4725EPSS 6% Stack consumption vulnerability in AkkyWareHOUSE 7-zip32.dll before 4.42.00.04, as derived from Igor Pavlov 7-Zip before 4.53 beta, allows user-assis… 7 Zip after 4.42 Fix from $1,6002007-09-05