Known vulnerabilities in 7-Zip

Vendor: 7-zip.org
Software: 7-Zip
Software CPE: cpe:2.3:a:7-zip_org:7-zip:*:*:*:*:*:*:*:*
Website:
Total vulnerabilities: 18
Public exploits: 7
Known exploited (KEV): 1
Highest CVSSv4 Score: 9.2

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting 7-Zip 7-Zip is affected by 18 known vulnerabilities: 11 high, 3 medium, 4 low Critical High Medium Low

Vulnerabilities (18)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU138425 - Heap-based Buffer Overflow
CVE-2026-14266
CWE-122 High
Available
No
26.02 20.07.2026 SB2026072022
SB2026083160
#VU132311 - Out-of-bounds write
CVE-2026-48095
CWE-787 High
No
No
26.01 26.05.2026 SB2026052651
#VU118787 - NULL Pointer Dereference
CVE-2025-53817
CWE-476 Low
No
No
25.00 26.11.2025 SB2025100830
SB2025112651
#VU116709 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2025-11002
CWE-22 High
Available
No
25.00 08.10.2025 SB2025100830
SB2026012765
#VU116689 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2025-11001
CWE-22 High
Available
No
25.00 08.10.2025 SB2025100830
#VU102998 - Security Features
CVE-2025-0411
CWE-254 High
Available
Exploited
24.09 20.01.2025 SB2025012003
SB2025031332
SB2025070424
#VU100863 - Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2024-11612
CWE-835 Low
No
No
24.08 22.11.2024 SB2024112237
SB20250416120
SB2026033157
and 1 more
#VU100758 - Integer underflow
CVE-2024-11477
CWE-191 High
Available
No
24.07 21.11.2024 SB2024112105
SB2025041804
SB2025070424
#VU93731 - Out-of-bounds read
CVE-2023-52169
CWE-125 Medium
No
No
24.01 03.07.2024 SB2024070344
SB2024071604
SB2024073019
and 2 more
#VU93730 - Heap-based Buffer Overflow
CVE-2023-52168
CWE-122 High
No
No
24.01 03.07.2024 SB2024070344
SB2024071604
SB2024073019
and 2 more
#VU80003 - Integer underflow
CVE-2023-31102
CWE-191 High
No
No
23.00 25.08.2023 SB2023082513
SB2024091647
SB2024102543
and 2 more
#VU80002 - Out-of-bounds write
CVE-2023-40481
CWE-787 High
No
No
23.00 25.08.2023 SB2023082513
SB2024091647
SB2024102543
and 1 more
#VU62367 - Heap-based Buffer Overflow
CVE-2022-29072
CWE-122 Medium
Available
No
22.00 19.04.2022 SB2022041901
#VU12820 - Improper Check or Handling of Exceptional Conditions
CVE-2018-5996
CWE-703 High
No
No
- 18.05.2018 SB2018011025
SB2018080818
SB2021073108
#VU12359 - Memory corruption
CVE-2018-10115
CWE-119 High
No
No
- 02.05.2018 SB2018050210
SB2018061005
SB2018080819
and 1 more
#VU12046 - Permissions, Privileges, and Access Controls
CVE-2018-10172
CWE-264 Low
No
No
- 20.04.2018 SB2018042102
#VU46819 - Untrusted Search Path
CVE-2017-2107
CWE-426 Low
No
No
9.23 28.04.2017 SB2017042843
#VU46811 - Heap-based Buffer Overflow
CVE-2007-4725
CWE-122 Medium
Available
No
4.53 05.09.2007 SB2007090501